{"id":85990,"date":"2020-06-21T01:42:12","date_gmt":"2020-06-20T23:42:12","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/snort-ili-suricata-chast-2-ustanovka-i-pervichnaya-nastrojka-suricata"},"modified":"2020-06-21T01:42:12","modified_gmt":"2020-06-20T23:42:12","slug":"snort-ili-suricata-chast-2-ustanovka-i-pervichnaya-nastrojka-suricata","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/snort-ili-suricata-chast-2-ustanovka-i-pervichnaya-nastrojka-suricata","title":{"rendered":"Snort ose Suricata. Pjesa 2: instalimi dhe konfigurimi fillestar i Suricata","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00ebse i besoni statistikave, v\u00ebllimi i trafikut t\u00eb rrjetit rritet me rreth 50% \u00e7do vit. Kjo \u00e7on n\u00eb rritje t\u00eb ngarkes\u00ebs n\u00eb pajisje dhe, n\u00eb ve\u00e7anti, rrit k\u00ebrkesat p\u00ebr performanc\u00ebn e IDS\/IPS. Mund t\u00eb blini pajisje speciale t\u00eb shtrenjta, por ka nj\u00eb mund\u00ebsi m\u00eb t\u00eb lir\u00eb - implementimi i nj\u00eb prej sistemeve me burim t\u00eb hapur. Shum\u00eb administrator\u00eb fillestar\u00eb mendojn\u00eb se instalimi dhe konfigurimi i nj\u00eb IPS falas \u00ebsht\u00eb mjaft i v\u00ebshtir\u00eb. Por n\u00eb rastin e Suricata-s, kjo nuk \u00ebsht\u00eb plot\u00ebsisht e v\u00ebrtet\u00eb - mund ta instaloni dhe t\u00eb filloni t\u00eb reflektoni sulmet tipike me nj\u00eb grup rregullash falas brenda disa minutash.<\/p>\n

\"Snort<\/a><\/noindex><\/a><\/noindex>
\nSnort ose Suricata. Pjesa 1: zgjidhni nj\u00eb IDS\/IPS falas p\u00ebr mbrojtjen e rrjetit t\u00eb korporat\u00ebs<\/a><\/noindex><\/p>\n

Pse duhet nj\u00eb tjet\u00ebr IPS e hapur?<\/h2>\n

\nSistemi Snort, i cili p\u00ebr nj\u00eb koh\u00eb t\u00eb gjat\u00eb ishte standard, \u00ebsht\u00eb zhvilluar q\u00eb nga fundi i viteve '90, k\u00ebshtu q\u00eb fillimisht ishte nj\u00eb i vet\u00ebm. Gjat\u00eb viteve t\u00eb shumta, ka fituar t\u00eb gjitha karakteristikat moderne, si mb\u00ebshtetje p\u00ebr IPv6, mund\u00ebsin\u00eb p\u00ebr t\u00eb analizuar protokollet e nivelit aplikativ apo nj\u00eb modul universale p\u00ebr qasje n\u00eb t\u00eb dh\u00ebna. <\/p>\n

Ngritja baz\u00eb e Snort 2.X ka m\u00ebsuar t\u00eb punoj\u00eb me disa b\u00ebrthama, por ka mbetur nj\u00eb e vetme dhe prandaj nuk mund t\u00eb shfryt\u00ebzoj\u00eb optimalisht avantazhet e platformave moderne t\u00eb pajisjeve. <\/p>\n

Problemi u zgjidh n\u00eb versionin e tret\u00eb t\u00eb sistemit, por u p\u00ebrgatit kaq gjat\u00eb saq\u00eb n\u00eb treg u shfaq Suricata, e shkruar nga fillimi si nj\u00eb alternativ\u00eb me shum\u00eb b\u00ebrthama ndaj Snort, e cila vjen me funksione IPS nga kutia. Kodi shp\u00ebrndahet n\u00ebn licenc\u00ebn GPLv2, por partner\u00ebt financiar\u00eb t\u00eb projektit kan\u00eb akses n\u00eb versionin e mbyllur t\u00eb motorit. Disa probleme me shkatht\u00ebsin\u00eb n\u00eb versionet e para t\u00eb sistemit u shfaq\u00ebn, por ato u zgjidh\u00ebn mjaft shpejt.<\/p>\n

Pse Suricata?<\/h2>\n

\nN\u00eb Suricata ka disa module (si n\u00eb Snort): kapjen, mbledhjen, dekodimin, zbulimin dhe daljen. N\u00eb m\u00ebnyr\u00eb t\u00eb paracaktuar, trafiku i kapur shkon deri n\u00eb dekodim me nj\u00eb rrjedh\u00eb, megjithat\u00eb, kjo e ngarkon m\u00eb shum\u00eb sistemin. N\u00ebse \u00ebsht\u00eb e nevojshme, rrjedhat mund t\u00eb ndahen n\u00eb konfigurime dhe t\u00eb shp\u00ebrndahen n\u00eb procesor\u00eb \u2014 Suricata optimizohet shum\u00eb mir\u00eb p\u00ebr harduerin specifik, megjithat\u00eb, kjo nuk \u00ebsht\u00eb nj\u00eb nivel HOWTO p\u00ebr fillestar\u00ebt. Duhet gjithashtu t\u00eb theksohet prania n\u00eb Suricata e mjeteve t\u00eb avancuara t\u00eb inspektimit HTTP t\u00eb bazuara n\u00eb bibliotek\u00ebn HTP. Ato gjithashtu mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb regjistruar trafikun pa ndjer\u00eb. Sistemi gjithashtu mb\u00ebshtet dekodimin e IPv6, duke p\u00ebrfshir\u00eb tunel\u00ebt IPv4-in-IPv6, IPv6-in-IPv6 dhe t\u00eb tjer\u00eb. <\/p>\n

P\u00ebr kapjen e trafikut mund t\u00eb p\u00ebrdoren nd\u00ebrfaqe t\u00eb ndryshme (NFQueue, IPFRing, LibPcap, IPFW, AF_PACKET, PF_RING), nd\u00ebrsa n\u00eb modalitetin Unix Socket mund t\u00eb analizohen automatikisht skedar\u00ebt PCAP q\u00eb jan\u00eb kapur nga nj\u00eb sniffers tjet\u00ebr. P\u00ebr m\u00eb tep\u00ebr, arkitektura modulare e Suricata e thjeshton lidhjen e elementeve t\u00eb reja p\u00ebr kapjen, dekodimin, analiz\u00ebn dhe p\u00ebrpunimin e paketeve rrjet. \u00cbsht\u00eb gjithashtu e r\u00ebnd\u00ebsishme t\u00eb theksohet se n\u00eb Suricata bllokimi i trafikut b\u00ebhet me mjetet e filtrit t\u00eb integruar t\u00eb sistemit operativ. N\u00eb GNU\/Linux jan\u00eb t\u00eb disponueshme dy variante t\u00eb pun\u00ebs IPS: p\u00ebrmes radh\u00ebs NFQUEUE (modaliteti NFQ) dhe p\u00ebrmes zero copy (modaliteti AF_PACKET). N\u00eb rastin e par\u00eb, paketi q\u00eb kalon n\u00eb iptables d\u00ebrgohet n\u00eb radh\u00ebn NFQUEUE, ku mund t\u00eb p\u00ebrpunoj\u00eb n\u00eb nivel p\u00ebrdoruesi. Suricata e kalon at\u00eb p\u00ebrmes rregullave t\u00eb saj dhe jep nj\u00eb nga tre verdiktet: NF_ACCEPT, NF_DROP dhe NF_REPEAT. T\u00eb parat dy nuk k\u00ebrkojn\u00eb shpjegim, nd\u00ebrsa e fundit lejon t\u00eb markohen paketat dhe t'i kthehen n\u00eb fillim t\u00eb tabel\u00ebs aktuale iptables. Modaliteti AF_PACKET shquhet p\u00ebr performanc\u00ebn e lart\u00eb, por i vendos sistemit disa kufizime: ai duhet t\u00eb ket\u00eb dy nd\u00ebrfaqe rrjeti dhe t\u00eb punoj\u00eb si nj\u00eb kalim. <\/p>\n

Nj\u00eb karakteristik\u00eb e r\u00ebnd\u00ebsishme e Suricata-s \u00ebsht\u00eb mund\u00ebsia e p\u00ebrdorimit t\u00eb punimeve p\u00ebr Snort. Administratorit i jan\u00eb n\u00eb dispozicion, p\u00ebr shembull, grupet e rregullave Sourcefire VRT dhe OpenSource Emerging Threats, si dhe format komerciale Emerging Threats Pro. Dalja e unifikuar mund t\u00eb analizohet me ndihm\u00ebn e backend-eve t\u00eb njohura, gjithashtu mb\u00ebshtetet dalja n\u00eb formatin PCAP dhe Syslog. Cil\u00ebsimet e sistemit dhe rregullat ruhen n\u00eb skedar\u00eb n\u00eb formatin YAML, i cili \u00ebsht\u00eb leht\u00ebsisht i lexuesh\u00ebm dhe mund t\u00eb p\u00ebrpunohet automatikisht. Motori Suricata njeh shum\u00eb protokolle, prandaj n\u00eb rregulla nuk ka nevoj\u00eb t\u00eb lidhet me numrin e portit. P\u00ebrve\u00e7 k\u00ebsaj, n\u00eb rregullat Suricata praktikohet aktivisht koncepti i flowbits. P\u00ebr ndjekjen e ngjarjeve p\u00ebrdoren variabla sesioni q\u00eb lejojn\u00eb krijimin dhe aplikimin e numrave dhe flamujve t\u00eb ndrysh\u00ebm. Shum\u00eb IDS e shohin lidhjet e ndryshme TCP si entitete t\u00eb ve\u00e7anta dhe mund t\u00eb mos shohin lidhjen midis tyre, e cila tregon fillimin e nj\u00eb sulmi. Suricata p\u00ebrpiqet t\u00eb shoh\u00eb pamjen e p\u00ebrgjithshme dhe n\u00eb shum\u00eb raste njeh trafikun e d\u00ebmsh\u00ebm t\u00eb shp\u00ebrndar\u00eb n\u00eb lidhje t\u00eb ndryshme. Mund t\u00eb flasim p\u00ebr avantazhet e saj p\u00ebr nj\u00eb koh\u00eb t\u00eb gjat\u00eb; m\u00eb mir\u00eb t\u00eb kalojm\u00eb n\u00eb instalimin dhe konfigurimin.<\/p>\n

Si t\u00eb instaloni?<\/h2>\n

\nNe do t\u00eb instalojm\u00eb Suricata n\u00eb nj\u00eb server virtual q\u00eb punon n\u00ebn Ubuntu 18.04 LTS. T\u00eb gjitha komandat duhet t\u00eb ekzekutohen n\u00eb em\u00ebr t\u00eb superp\u00ebrdoruesit (root). Opsioni m\u00eb i sigurt \u00ebsht\u00eb t\u00eb lidhemi me serverin p\u00ebrmes SSH si nj\u00eb p\u00ebrdorues i zakonsh\u00ebm dhe pastaj t\u00eb aplikojm\u00eb utilitarin sudo p\u00ebr t\u00eb rritur privilegjet. S\u00eb pari, nevojitet t\u00eb instalohet paketa t\u00eb cilat na duhen:<\/p>\n

sudo apt -y install libpcre3 libpcre3-dev build-essential autoconf automake libtool libpcap-dev libnet1-dev libyaml-0-2 libyaml-dev zlib1g zlib1g-dev libmagic-dev libcap-ng-dev libjansson-dev pkg-config libnetfilter-queue-dev geoip-bin geoip-database geoipupdate apt-transport-https<\/code><\/pre>\n
\nLidhim depozita t\u00eb jashtme:<\/p>\n
sudo add-apt-repository ppa:oisf\/suricata-stable\nsudo apt-get update<\/code><\/pre>\n
\nInstalojm\u00eb versionin m\u00eb t\u00eb fundit stabil t\u00eb Suricata-s:<\/p>\n
sudo apt-get install suricata<\/code><\/pre>\n
\nN\u00ebse \u00ebsht\u00eb e nevojshme, modifikojm\u00eb skedar\u00ebt e konfigurimit t\u00eb emrit, duke z\u00ebvend\u00ebsuar eth0 q\u00eb p\u00ebrdoret si parazgjedhje me emrin aktual t\u00eb nd\u00ebrfaqes jashtme t\u00eb serverit. Cil\u00ebsimet e parazgjedhura ruhen n\u00eb skedarin \/etc\/default\/suricata, nd\u00ebrsa ato p\u00ebrdoruesit ruhen n\u00eb \/etc\/suricata\/suricata.yaml. Konfigurimi i IDS zakonisht kufizohet n\u00eb modifikimin e k\u00ebtij skedari konfigurimi. Ai ka shum\u00eb parametra, t\u00eb cil\u00ebt p\u00ebr emrin dhe q\u00ebllimin p\u00ebrputhen me ato nga Snort. Sintaksa megjithat\u00eb \u00ebsht\u00eb krejt\u00ebsisht ndryshe, por skedari \u00ebsht\u00eb shum\u00eb m\u00eb e leht\u00eb p\u00ebr t'u lexuar se konfigurimet e Snort, p\u00ebr m\u00eb tep\u00ebr \u00ebsht\u00eb mir\u00eb komentuese.<\/p>\n
sudo nano \/etc\/default\/suricata<\/code><\/pre>\n
\n\"Snort
\n
\ndhe<\/p>\n
sudo nano \/etc\/suricata\/suricata.yaml<\/code><\/pre>\n
\n\"Snort
\n
\nKujdes! Para se t\u00eb filloni, duhet t\u00eb kontrolloni vlerat e variablave nga seksioni vars.<\/p>\n
P\u00ebr t\u00eb p\u00ebrfunduar konfigurimin, do t\u00eb nevojitet t\u00eb instaloni suricata-update p\u00ebr t\u00eb azhurnuar dhe ngarkuar rregullat. T\u00eb b\u00ebsh k\u00ebt\u00eb \u00ebsht\u00eb shum\u00eb e thjesht\u00eb:<\/p>\n
sudo apt install python-pip\nsudo pip install pyyaml\nsudo pip install <a href="https:\/\/github.com\/OISF\/suricata-update\/archive\/master.zip">https:\/\/github.com\/OISF\/suricata-update\/archive\/master.zip<\/a>\nsudo pip install --pre --upgrade suricata-update<\/code><\/pre>\n
\nM\u00eb pas na nevojitet t\u00eb ekzekutojm\u00eb komand\u00ebn suricata-update p\u00ebr t\u00eb instaluar paket\u00ebn e rregullave Emerging Threats Open:<\/p>\n
sudo suricata-update<\/code><\/pre>\n
\n\"Snort
\n
\nP\u00ebr t\u00eb par\u00eb list\u00ebn e burimeve t\u00eb rregullave, ekzekutojm\u00eb komand\u00ebn n\u00eb vijim:<\/p>\n
sudo suricata-update list-sources<\/code><\/pre>\n
\n\"Snort
\n
\nAzhurnojm\u00eb burimet e rregullave:<\/p>\n
sudo suricata-update update-sources<\/code><\/pre>\n
\n\"Snort
\n
\nRishikojm\u00eb burimet e azhurnuara:<\/p>\n
sudo suricata-update list-sources<\/code><\/pre>\n
\nN\u00ebse \u00ebsht\u00eb e nevojshme, mund t\u00eb aktivizoni burimet m\u00ebm\u00eb falas:<\/p>\n
sudo suricata-update enable-source ptresearch\/attackdetection\nsudo suricata-update enable-source oisf\/trafficid\nsudo suricata-update enable-source sslbl\/ssl-fp-blacklist<\/code><\/pre>\n
\nPas k\u00ebsaj, \u00ebsht\u00eb e nevojshme t\u00eb azhurnoni p\u00ebrs\u00ebri rregullat:<\/p>\n
sudo suricata-update<\/code><\/pre>\n
\nK\u00ebshtu, instalimi dhe konfigurimi fillestar i Suricata n\u00eb Ubuntu 18.04 LTS mund t\u00eb konsiderohet i p\u00ebrfunduar. M\u00eb tej fillon e funit: n\u00eb artikullin e ardhsh\u00ebm do t\u00eb lidhim serverin virtual me rrjetin zyrtar p\u00ebrmes VPN dhe do t\u00eb fillojm\u00eb t\u00eb analizojm\u00eb t\u00eb gjith\u00eb trafikun hyr\u00ebs dhe dal\u00ebs. Do t'i kushtohet v\u00ebmendje t\u00eb ve\u00e7ant\u00eb bllokimit t\u00eb sulmeve DDoS, aktivitetit t\u00eb malware dhe p\u00ebrpjekjeve p\u00ebr t\u00eb shfryt\u00ebzuar dob\u00ebsit\u00eb n\u00eb sh\u00ebrbimet n\u00eb dispozicion nga rrjetet publike. P\u00ebr qart\u00ebsi do t\u00eb simulojm\u00eb sulme t\u00eb llojeve m\u00eb t\u00eb zakonshme.<\/p>\n
\"Snort<\/a><\/noindex><\/p>\n
\"Snort<\/a><\/noindex>
\n
Burimi: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435, \u043e\u0431\u044a\u0435\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 50% \u043a\u0430\u0436\u0434\u044b\u0439 \u0433\u043e\u0434. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0440\u043e\u0441\u0442\u0443 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 IDS\/IPS. \u041c\u043e\u0436\u043d\u043e \u043f\u043e\u043a\u0443\u043f\u0430\u0442\u044c \u0434\u043e\u0440\u043e\u0433\u043e\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0436\u0435\u043b\u0435\u0437\u043e, \u043d\u043e \u0435\u0441\u0442\u044c \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043f\u043e\u0434\u0435\u0448\u0435\u0432\u043b\u0435 \u2014 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u041c\u043d\u043e\u0433\u0438\u0435 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0431\u0443\u0434\u0442\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438 \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0443\u044e IPS […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85991,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-85990","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Snort ose Suricata. Pjesa 2: instalimi dhe konfigurimi fillestar i Suricata | ProHoster","description":"N\u00ebse besojm\u00eb statistikave, volumi i trafikut t\u00eb rrjetit rritet n\u00eb m\u00ebnyr\u00eb t\u00eb p\u00ebraf\u00ebrt me 50% \u00e7do vit. Kjo \u00e7on n\u00eb rritjen e ngarkes\u00ebs mbi pajisjet dhe, ve\u00e7an\u00ebrisht, rrit k\u00ebrkesat p\u00ebr performanc\u00ebn e IDS\/IPS.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/snort-ili-suricata-chast-2-ustanovka-i-pervichnaya-nastrojka-suricata","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Snort \u0438\u043b\u0438 Suricata. \u0427\u0430\u0441\u0442\u044c 2: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438 \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Suricata | ProHoster","og:description":"\u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435, \u043e\u0431\u044a\u0435\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 50% \u043a\u0430\u0436\u0434\u044b\u0439 \u0433\u043e\u0434. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0440\u043e\u0441\u0442\u0443 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 IDS\/IPS.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/snort-ili-suricata-chast-2-ustanovka-i-pervichnaya-nastrojka-suricata","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-20T23:42:12+00:00","article:modified_time":"2020-06-20T23:42:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85990","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:26:01","updated":"2026-08-11 12:50:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/85990","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=85990"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/85990\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/85991"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=85990"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=85990"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=85990"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}