Snort Home Network Intrusion Detection System Part 1 - Setup

Enhance your home network security with Snort, the powerful Network Intrusion Detection System (NIDS)!
Part 1 - Setup

Oracle VM download:
https://www.virtualbox.org/wiki/Downl...

ubuntu download:
https://ubuntu.com/download/desktop

Subnet calculator:
https://www.davidc.net/sites/default/...

create snort rules with snorpy:
http://snorpy.cyb3rs3c.net/

metasploitable2:
https://sourceforge.net/projects/meta...

kali:
https://www.kali.org/get-kali/#kali-i...

snort configuring white and black list:
https://sublimerobots.com/2015/12/the...

snort reputation preprocessor:
https://www.snort.org/faq/readme-repu...

common home ip's:
10.0.0.0 – 10.255.255.255 (10.0.0.0/8)
172.16.0.0 – 172.31.255.255 (172.16.0.0/12)
192.168.0.0 – 192.168.255.255 (192.168.0.0/16)

Useful Commands:
sudo apt-get update
sudo apt install net-tools
sudo apt-get install snort -y
snort --version

Edit snort config files with vs code:
sudo code /etc/snort -–no-sandbox -–user-data-dir -–verbose

Run Snort::
sudo snort –q –l /var/log/snort –l enp0s3 –A console –c /etc/snort/snort.conf

Useful nmap commands:
nmap -v -sn 10.0.0.0/8
nmap -v -sn 10.0.0.0/24