{"id":85990,"date":"2020-06-21T01:42:12","date_gmt":"2020-06-20T23:42:12","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/snort-ili-suricata-chast-2-ustanovka-i-pervichnaya-nastrojka-suricata"},"modified":"2020-06-21T01:42:12","modified_gmt":"2020-06-20T23:42:12","slug":"snort-ili-suricata-chast-2-ustanovka-i-pervichnaya-nastrojka-suricata","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/snort-ili-suricata-chast-2-ustanovka-i-pervichnaya-nastrojka-suricata","title":{"rendered":"Snort sau Suricata. Partea 2: instalarea \u0219i configurarea ini\u021bial\u0103 a Suricata","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Dac\u0103 ne g\u00e2ndim la statisticile actuale, volumul de trafic de re\u021bea cre\u0219te cu aproximativ 50% \u00een fiecare an. Acest lucru duce la o cre\u0219tere a \u00eenc\u0103rc\u0103rii echipamentului \u0219i, \u00een special, la cre\u0219terea cerin\u021belor de performan\u021b\u0103 ale IDS\/IPS. Se pot achizi\u021biona echipamente specializate costisitoare, dar exist\u0103 o op\u021biune mai accesibil\u0103 \u2014 implementarea unui sistem open-source. Mul\u021bi administratori \u00eencep\u0103tori consider\u0103 c\u0103 instalarea \u0219i configurarea unui IPS gratuit este destul de complicat\u0103. \u00cen cazul Suricata, acest lucru nu este chiar adev\u0103rat \u2014 pot fi instalate \u0219i configurate rapid, iar tipurile obi\u0219nuite de atacuri pot fi respinse utiliz\u00e2nd un set de reguli gratuit \u00een c\u00e2teva minute.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ruvds\/blog\/507234\/\"><img decoding=\"async\" alt=\"Snort sau Suricata. Partea 2: instalarea \u0219i configurarea ini\u021bial\u0103 a Suricata\" src=\"\/wp-content\/uploads\/2020\/06\/38b577d1359bfd99ca1f4c7510d8563b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ruvds\/blog\/506730\/\">Snort sau Suricata. Partea 1: alegerea unei IDS\/IPS gratuite pentru protejarea re\u021belei corporative<\/a><\/noindex><\/p>\n<h2>De ce este nevoie de \u00eenc\u0103 un IPS open-source?<\/h2>\n<p>\nSistemul Snort, considerat mult timp standard, a fost dezvoltat la sf\u00e2r\u0219itul anilor '90, deci la \u00eenceput a fost un sistem uniplu. De-a lungul anilor, a fost \u00eembog\u0103\u021bit cu toate caracteristicile moderne, precum suportul pentru IPv6, analiza protocoalelor de aplica\u021bie sau un modul universal de acces la date. <\/p>\n<p>Motorul de baz\u0103 Snort 2.X a \u00eenv\u0103\u021bat s\u0103 func\u021bioneze cu mai multe nuclee, dar a r\u0103mas totu\u0219i uniplu \u0219i, astfel, nu poate folosi optim avantajele platformelor hardware moderne. <\/p>\n<p>Aceast\u0103 problem\u0103 a fost rezolvat\u0103 \u00een a treia versiune a sistemului, \u00eens\u0103 dezvoltarea a durat at\u00e2t de mult timp \u00eenc\u00e2t pe pia\u021b\u0103 a ap\u0103rut Suricata, scris\u0103 de la zero. \u00cen 2009, a fost dezvoltat\u0103 ca o alternativ\u0103 multi-threaded la Snort, av\u00e2nd din start func\u021bionalitatea IPS. Codul este distribuit sub licen\u021ba GPLv2, dar partenerii financiari ai proiectului au acces la o versiune \u00eenchis\u0103 a motorului. Unele probleme de scalabilitate din versiunile ini\u021biale ale sistemului au ap\u0103rut, dar acestea au fost rezolvate rapid.<\/p>\n<h2>De ce Suricata?<\/h2>\n<p>\nSuricata dispune de mai multe module (la fel ca Snort): capturare, colectare, decodare, detec\u021bie \u0219i emitere. \u00cen mod implicit, traficul capturat este procesat \u00eentr-un singur fir p\u00e2n\u0103 la decodare, de\u0219i aceasta \u00eencarc\u0103 mai mult sistemul. Dac\u0103 este necesar, firele pot fi separate \u00een set\u0103ri \u0219i distribuite pe procesoare \u2014 Suricata este foarte bine optimizat\u0103 pentru hardware-ul specific, de\u0219i aceasta nu este o descriere destinat \u00eenceputorilor. Este de asemenea de men\u021bionat c\u0103 Suricata dispune de mecanisme avansate de inspec\u021bie HTTP bazate pe biblioteca HTP. Acestea pot fi folosite \u0219i pentru a \u00eenregistra traficul f\u0103r\u0103 a detecta. Sistemul suport\u0103, de asemenea, decodarea IPv6, inclusiv tuneluri IPv4-in-IPv6, IPv6-in-IPv6 \u0219i altele. <\/p>\n<p>Pentru interceptarea traficului pot fi folosite diferite interfe\u021be (NFQueue, IPFRing, LibPcap, IPFW, AF_PACKET, PF_RING), iar \u00een modul Unix Socket este posibil s\u0103 analiza\u021bi automat fi\u0219ierele PCAP capturate de alte sniffer-uri. \u00cen plus, arhitectura modular\u0103 a Suricata faciliteaz\u0103 integrarea de noi componente pentru captur\u0103, decodare, analiz\u0103 \u0219i procesare a pachetelor de re\u021bea. Este important de men\u021bionat c\u0103 \u00een Suricata blocarea traficului se realizeaz\u0103 prin intermediul filtrului standard al sistemului de operare. \u00cen GNU\/Linux sunt disponibile dou\u0103 op\u021biuni pentru IPS: prin intermediul cozii NFQUEUE (modul NFQ) \u0219i prin zero copy (modul AF_PACKET). \u00cen primul caz, pachetul care ajunge \u00een iptables este direc\u021bionat spre coada NFQUEUE, unde poate fi procesat la nivel de utilizator. Suricata \u00eel analizeaz\u0103 conform regulilor sale \u0219i emite unul dintre cele trei verdicturi: NF_ACCEPT, NF_DROP \u0219i NF_REPEAT. Primele dou\u0103 nu necesit\u0103 explica\u021bii, iar ultimul permite marcare pachetelor \u0219i returnarea acestora la \u00eenceputul tabelului actual iptables. Modul AF_PACKET se distinge printr-o vitez\u0103 mai mare, dar impune o serie de restric\u021bii asupra sistemului: acesta trebuie s\u0103 aib\u0103 dou\u0103 interfe\u021be de re\u021bea \u0219i s\u0103 func\u021bioneze ca un gateway. Pachetul blocat pur \u0219i simplu nu este retransmis pe a doua interfa\u021b\u0103. <\/p>\n<p>O caracter important al Suricata este capacitatea de a utiliza resursele dezvoltate pentru Snort. Administratorului \u00eei sunt disponibile, \u00een special, seturile de reguli Sourcefire VRT \u0219i OpenSource Emerging Threats, precum \u0219i comerciale Emerging Threats Pro. Ie\u015firea unificat\u0103 poate fi analizat\u0103 cu ajutorul backend-urilor populare, de asemenea, suportul pentru ie\u015firi \u00een format PCAP \u0219i Syslog este inclus. Set\u0103rile sistemului \u0219i regulile sunt stocate \u00een fi\u0219iere de format YAML, care sunt u\u0219or de citit \u0219i pot fi procesate automat. Motoarele Suricata recunosc numeroase protocoale, astfel \u00eenc\u00e2t regulile nu trebuie s\u0103 fie legate de num\u0103rul de port. \u00cen plus, \u00een regulile Suricata este activ practicat\u0103 conceptul de flowbits. Pentru a urm\u0103ri activarea sunt utilizate variabile de sesiune, care permit crearea \u0219i aplicarea diferitelor contoriz\u0103ri \u0219i semnale. Multe IDS consider\u0103 diferitele conexiuni TCP ca fiind entit\u0103\u021bi separate \u0219i pot s\u0103 nu observe rela\u021biile dintre ele, care sugereaz\u0103 \u00eenceputul unui atac. Suricata \u00eencearc\u0103 s\u0103 vad\u0103 \u00eentreaga imagine \u0219i, \u00een multe cazuri, recunoa\u0219te traficul d\u0103un\u0103tor distribuit pe diferite conexiuni. Se poate discuta mult despre avantajele acesteia, mai bine s\u0103 trecem la instalare \u0219i configurare.<\/p>\n<h2>Cum s\u0103 instal\u0103m?<\/h2>\n<p>\nVom instala Suricata pe un server virtual care ruleaz\u0103 pe Ubuntu 18.04 LTS. Toate comenzile trebuie executate cu drepturi de superutilizator (root). Cea mai sigur\u0103 variant\u0103 este s\u0103 v\u0103 conecta\u021bi la server prin SSH cu drepturi de utilizator obi\u0219nuit, apoi s\u0103 aplica\u021bi utilitarul sudo pentru a cre\u0219te privilegiile. \u00cen primul r\u00e2nd, trebuie s\u0103 instal\u0103m pachetele de care avem nevoie:<\/p>\n<pre><code class=\"bash\">sudo apt -y install libpcre3 libpcre3-dev build-essential autoconf automake libtool libpcap-dev libnet1-dev libyaml-0-2 libyaml-dev zlib1g zlib1g-dev libmagic-dev libcap-ng-dev libjansson-dev pkg-config libnetfilter-queue-dev geoip-bin geoip-database geoipupdate apt-transport-https<\/code><\/pre>\n<p>\nAd\u0103ug\u0103m repository-ul extern:<\/p>\n<pre><code class=\"bash\">sudo add-apt-repository ppa:oisf\/suricata-stable\nsudo apt-get update<\/code><\/pre>\n<p>\nInstal\u0103m cea mai recent\u0103 versiune stabil\u0103 a Suricata:<\/p>\n<pre><code class=\"bash\">sudo apt-get install suricata<\/code><\/pre>\n<p>\nDac\u0103 este necesar, modific\u0103m fi\u0219ierele de configurare a numelui, \u00eenlocuind eth0, utilizat implicit, cu numele real al interfe\u021bei externe a serverului. Set\u0103rile implicite sunt stocate \u00een fi\u0219ierul \/etc\/default\/suricata, iar set\u0103rile personalizate \u00een \/etc\/suricata\/suricata.yaml. Configurarea IDS se limiteaz\u0103 \u00een mare parte la modificarea acestui fi\u0219ier de configurare. Acesta con\u021bine numeroase parametrii care, prin numele \u0219i scopul lor, corespund analogilor din Snort. Totu\u0219i, sintaxa este complet diferit\u0103, dar fi\u0219ierul este mult mai u\u0219or de citit dec\u00e2t configura\u021biile Snort, \u00een plus, este bine comentat.<\/p>\n<pre><code class=\"bash\">sudo nano \/etc\/default\/suricata<\/code><\/pre>\n<p>\n<img decoding=\"async\" alt=\"Snort sau Suricata. Partea 2: instalarea \u0219i configurarea ini\u021bial\u0103 a Suricata\" src=\"\/wp-content\/uploads\/2020\/06\/17ae36d4ca58f0347b0b17f5fcb31c7b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u0219i<\/p>\n<pre><code class=\"bash\">sudo nano \/etc\/suricata\/suricata.yaml<\/code><\/pre>\n<p>\n<img decoding=\"async\" alt=\"Snort sau Suricata. Partea 2: instalarea \u0219i configurarea ini\u021bial\u0103 a Suricata\" src=\"\/wp-content\/uploads\/2020\/06\/d2d39b52920aa2019fd2a3ec74fcab78.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAten\u021bie! \u00cenainte de a porni, ar trebui s\u0103 verifica\u021bi valorile variabilelor din sec\u021biunea vars.<\/p>\n<p>Pentru a finaliza configurarea, va trebui s\u0103 instala\u021bi suricata-update pentru a actualiza \u0219i desc\u0103rca reguli. Este destul de simplu de realizat:<\/p>\n<pre><code class=\"bash\">sudo apt install python-pip\nsudo pip install pyyaml\nsudo pip install &lt;a href=&quot;https:\/\/github.com\/OISF\/suricata-update\/archive\/master.zip&quot;&gt;https:\/\/github.com\/OISF\/suricata-update\/archive\/master.zip&lt;\/a&gt;\nsudo pip install --pre --upgrade suricata-update<\/code><\/pre>\n<p>\nMai departe, trebuie s\u0103 rul\u0103m comanda suricata-update pentru a instala setul de reguli Emerging Threats Open:<\/p>\n<pre><code class=\"bash\">sudo suricata-update<\/code><\/pre>\n<p>\n<img decoding=\"async\" alt=\"Snort sau Suricata. Partea 2: instalarea \u0219i configurarea ini\u021bial\u0103 a Suricata\" src=\"\/wp-content\/uploads\/2020\/06\/e3174089b6a2c67b8db36d2e40c50af9.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPentru a vizualiza lista surselor de reguli, execut\u0103m urm\u0103toarea comand\u0103:<\/p>\n<pre><code class=\"bash\">sudo suricata-update list-sources<\/code><\/pre>\n<p>\n<img decoding=\"async\" alt=\"Snort sau Suricata. Partea 2: instalarea \u0219i configurarea ini\u021bial\u0103 a Suricata\" src=\"\/wp-content\/uploads\/2020\/06\/7cded45bf414c2c2e76fc0bb3e1bb65c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nActualiz\u0103m sursele de reguli:<\/p>\n<pre><code class=\"bash\">sudo suricata-update update-sources<\/code><\/pre>\n<p>\n<img decoding=\"async\" alt=\"Snort sau Suricata. Partea 2: instalarea \u0219i configurarea ini\u021bial\u0103 a Suricata\" src=\"\/wp-content\/uploads\/2020\/06\/786f46118b87cece96e818c70662e3c4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nReverific\u0103m sursele actualizate:<\/p>\n<pre><code class=\"bash\">sudo suricata-update list-sources<\/code><\/pre>\n<p>\nDac\u0103 este necesar, pute\u021bi activa sursele gratuite disponibile:<\/p>\n<pre><code class=\"bash\">sudo suricata-update enable-source ptresearch\/attackdetection\nsudo suricata-update enable-source oisf\/trafficid\nsudo suricata-update enable-source sslbl\/ssl-fp-blacklist<\/code><\/pre>\n<p>\nDup\u0103 aceasta, este necesar s\u0103 actualiza\u021bi din nou regulile:<\/p>\n<pre><code class=\"bash\">sudo suricata-update<\/code><\/pre>\n<p>\nInstalarea \u0219i configurarea ini\u021bial\u0103 a Suricata pe Ubuntu 18.04 LTS se poate considera finalizat\u0103. Aici \u00eencepe partea interesant\u0103: \u00een urm\u0103torul articol, vom conecta serverul virtual la re\u021beaua de birou prin VPN \u0219i vom \u00eencepe s\u0103 analiz\u0103m tot traficul de intrare \u0219i ie\u0219ire. Vom acorda o aten\u021bie special\u0103 bloc\u0103rii atacurilor DDoS, activit\u0103\u021bii malware \u0219i \u00eencerc\u0103rilor de exploatare a vulnerabilit\u0103\u021bilor \u00een serviciile accesibile din re\u021belele publice. Pentru claritate, vor fi simulate atacuri ale celor mai comune tipuri.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"http:\/\/ruvds.com\/ru-rub?utm_source=habr&amp;utm_medium=article&amp;utm_campaign=ek&amp;utm_content=snort-ili-suricata-2\"><img decoding=\"async\" alt=\"Snort sau Suricata. Partea 2: instalarea \u0219i configurarea ini\u021bial\u0103 a Suricata\" src=\"\/wp-content\/uploads\/2020\/06\/8911da77f90d8843a2c0da3c1cb1d5b0.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"http:\/\/ruvds.com\/ru-rub?utm_source=habr&amp;utm_medium=article&amp;utm_campaign=ek&amp;utm_content=snort-ili-suricata-2#order\"><img decoding=\"async\" alt=\"Snort sau Suricata. Partea 2: instalarea \u0219i configurarea ini\u021bial\u0103 a Suricata\" src=\"\/wp-content\/uploads\/2020\/06\/f9220be24979f78c539e08d755f4257f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ruvds\/blog\/507234\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435, \u043e\u0431\u044a\u0435\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 50% \u043a\u0430\u0436\u0434\u044b\u0439 \u0433\u043e\u0434. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0440\u043e\u0441\u0442\u0443 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 IDS\/IPS. \u041c\u043e\u0436\u043d\u043e \u043f\u043e\u043a\u0443\u043f\u0430\u0442\u044c \u0434\u043e\u0440\u043e\u0433\u043e\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0436\u0435\u043b\u0435\u0437\u043e, \u043d\u043e \u0435\u0441\u0442\u044c \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043f\u043e\u0434\u0435\u0448\u0435\u0432\u043b\u0435 \u2014 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u041c\u043d\u043e\u0433\u0438\u0435 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0431\u0443\u0434\u0442\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438 \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0443\u044e IPS [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85991,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-85990","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435, \u043e\u0431\u044a\u0435\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 50% \u043a\u0430\u0436\u0434\u044b\u0439 \u0433\u043e\u0434. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0440\u043e\u0441\u0442\u0443 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 IDS\/IPS.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/snort-ili-suricata-chast-2-ustanovka-i-pervichnaya-nastrojka-suricata\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Snort \u0438\u043b\u0438 Suricata. \u0427\u0430\u0441\u0442\u044c 2: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438 \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Suricata | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435, \u043e\u0431\u044a\u0435\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 50% \u043a\u0430\u0436\u0434\u044b\u0439 \u0433\u043e\u0434. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0440\u043e\u0441\u0442\u0443 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 IDS\/IPS.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/snort-ili-suricata-chast-2-ustanovka-i-pervichnaya-nastrojka-suricata\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-20T23:42:12+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-20T23:42:12+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Snort sau Suricata. Partea 2: instalare \u0219i configurare ini\u021bial\u0103 Suricata | ProHoster","description":"Dac\u0103 avem \u00eencredere \u00een statistici, volumul de trafic de re\u021bea cre\u0219te cu aproximativ 50% \u00een fiecare an. Acest lucru duce la cre\u0219terea \u00eenc\u0103rc\u0103rii echipamentului \u0219i, \u00een special, cre\u0219te cerin\u021bele de performan\u021b\u0103 pentru IDS\/IPS.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/snort-ili-suricata-chast-2-ustanovka-i-pervichnaya-nastrojka-suricata","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Snort \u0438\u043b\u0438 Suricata. \u0427\u0430\u0441\u0442\u044c 2: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438 \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Suricata | ProHoster","og:description":"\u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435, \u043e\u0431\u044a\u0435\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 50% \u043a\u0430\u0436\u0434\u044b\u0439 \u0433\u043e\u0434. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0440\u043e\u0441\u0442\u0443 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 IDS\/IPS.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/snort-ili-suricata-chast-2-ustanovka-i-pervichnaya-nastrojka-suricata","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-20T23:42:12+00:00","article:modified_time":"2020-06-20T23:42:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85990","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:26:01","updated":"2026-08-11 12:50:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/85990","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=85990"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/85990\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/85991"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=85990"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=85990"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=85990"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}