OSSEC installation guide
发布时间：2014-09-05 14:00:19作者：知识屋
OSSEC installation guide
SSEC is an Open Source Host-based Intrusion Detection System. It performs log analysis, integrity checking, Windows registry monitoring, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, Mac OS X, Solaris and Windows.
The official document link: http://www.ossec.net/doc/index.html
How to install OSSEC
Download the latest version
[plain]
#wget http://www.ossec.net/files/ossec-hids-2.7.1-beta-1.tar.gz
Extract the compressed package and run the “./install.sh” script (It will guide you through the installation).
[plain]
# tar -zxvf ossec-hids-*.tar.gz (or gunzip -d; tar -xvf)
# cd ossec-hids-*
# ./install.sh
Follow the installation prompts and complete all steps.
Install Server on server host.
Install Agent on client host.
The configuration part
Add client agent into Server host.
On server machine type command.
[plain]
#/var/ossec/bin/manage_agents
Select "A" to enter into add agent menu, and input the agent name and IP.
Back to main menu and select "E" option for extract key for client agent.
Copy the Key to somewhere save for agent machine.
On agent machine side.
[plain]
#/var/ossec/bin/manage_agents
Select "I" option for import the key which just extracted from server machine.
You are all set now!
Some simple command examples.
Check the status of your agents
[html]
#/var/ossec/bin/agent_control -lc
or
[plain]
#/var/ossec/bin/agent_control -i agentID
Check the latest log status
[plain]
# tail -F /var/ossec/logs/ossec.log
Start/Stop OSSEC process
[plain]
#/var/ossec/bin/ossec-control start/stop
Manage agent main menu
[plain]
#/var/ossec/bin/manage_agents
Issues：
There is a bug in official build 2.7 that the agents disconnect after a few minutes. for resolve it, you may need to upgrade to version 2.7.1 beta.
（免责声明：文章内容如涉及作品内容、版权和其它问题，请及时与我们联系，我们将在第一时间删除内容，文章内容仅供参考）
相关知识
-
linux一键安装web环境全攻略 在linux系统中怎么一键安装web环境方法
-
Linux网络基本网络配置方法介绍 如何配置Linux系统的网络方法
-
Linux下DNS服务器搭建详解 Linux下搭建DNS服务器和配置文件
-
对Linux进行详细的性能监控的方法 Linux 系统性能监控命令详解
-
linux系统root密码忘了怎么办 linux忘记root密码后找回密码的方法
-
Linux基本命令有哪些 Linux系统常用操作命令有哪些
-
Linux必学的网络操作命令 linux网络操作相关命令汇总
-
linux系统从入侵到提权的详细过程 linux入侵提权服务器方法技巧
-
linux系统怎么用命令切换用户登录 Linux切换用户的命令是什么
-
在linux中添加普通新用户登录 如何在Linux中添加一个新的用户
软件推荐
更多 >
-
1
专为国人订制！Linux Deepin新版发布2012-07-10
-
2
CentOS 6.3安装(详细图解教程)
-
3
Linux怎么查看网卡驱动?Linux下查看网卡的驱动程序
-
4
centos修改主机名命令
-
5
Ubuntu或UbuntuKyKin14.04Unity桌面风格与Gnome桌面风格的切换
-
6
FEDORA 17中设置TIGERVNC远程访问
-
7
StartOS 5.0相关介绍，新型的Linux系统！
-
8
解决vSphere Client登录linux版vCenter失败
-
9
LINUX最新提权 Exploits Linux Kernel <= 2.6.37
-
10
nginx在网站中的7层转发功能
