[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-290707-105":3,"detail-sidebar-cat-0-en-105":81,"doc-detail-290707-en":131},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","msc-research-project-configuration-manual-traditional-method-snort","MSc Research Project - Configuration Manual - Traditional Method (SNORT)","","MSc research project submission form and configuration manual content for installing, configuring, and running Snort for intrusion detection, followed by a section outline for a machine learning–based IDS on Linux networks. It includes certification and submission checklist instructions, plus step-by-step commands for Ubuntu installation, snort.conf network variable configuration, local rule file setup, and example HTTP traffic detection rules. It also provides example Snort configurations and running commands, DDoS detection rule patterns, and initial guidance for setting up a virtualization environment for ML implementation.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/research-report/","Research & Report",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/msc-research-project-configuration-manual-traditional-method-snort/290707/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/msc-research-project-configuration-manual-traditional-method-snort/290707.png","ImageObject",300,407,{"name":42,"@type":43},"Levi","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-18","2026-09-17",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",11,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"What Snort installation and basic setup commands are provided for Ubuntu?","Question",{"text":63,"@type":64},"The document provides commands to update apt repositories and install Snort (sudo apt-get update, sudo apt-get install snort), followed by configuration prompts for the home network environment.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"Where is the Snort configuration file located and what must be configured in it?",{"text":68,"@type":64},"It states that snort.conf is typically located at /etc/snort/snort.conf and that network variables such as HOME_NET must match the environment, along with includes for rule files and enabling desired detection rules.",{"name":70,"@type":61,"acceptedAnswer":71},"How does the document suggest running Snort and what does it use to generate alerts?",{"text":72,"@type":64},"It instructs running Snort in alert mode using a console command with -c /etc/snort/snort.conf and -i for the interface (e.g., enp0s3 or eth0), while alerts are generated according to local.rules.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},290707,1789642407,{"code":4,"msg":82,"data":83},"success",[84,88,92,96,101,106,111,115,120,123,127],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":85,"show_sort_weight":86,"slug":87},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":89,"show_sort_weight":90,"slug":91},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":93,"show_sort_weight":94,"slug":95},"Exam",70,"exam",{"id":97,"doc_module":4,"doc_module_name":25,"category_name":98,"show_sort_weight":99,"slug":100},5,"Comic",60,"comic",{"id":102,"doc_module":4,"doc_module_name":25,"category_name":103,"show_sort_weight":104,"slug":105},6,"Technology",50,"technology",{"id":107,"doc_module":4,"doc_module_name":25,"category_name":108,"show_sort_weight":109,"slug":110},7,"Healthcare",40,"healthcare",{"id":112,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":113,"slug":114},8,30,"research-report",{"id":116,"doc_module":4,"doc_module_name":25,"category_name":117,"show_sort_weight":118,"slug":119},9,"Religion & Spirituality",20,"religion-spirituality",{"id":118,"doc_module":4,"doc_module_name":25,"category_name":121,"show_sort_weight":118,"slug":122},"World Cup","world-cup",{"id":124,"doc_module":4,"doc_module_name":25,"category_name":125,"show_sort_weight":124,"slug":126},10,"Lifestyle","lifestyle",{"id":128,"doc_module":4,"doc_module_name":25,"category_name":129,"show_sort_weight":97,"slug":130},19,"General","general",{"code":4,"msg":82,"data":132},{"doc_id":79,"user_id":133,"nickname":42,"user_avatar":134,"doc_module":4,"category_id":112,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":135,"file_id":136,"file_url":137,"file_type":138,"file_size":139,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":140,"language":141,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":142,"faqs":143,"seo_title":144,"seo_description":12,"update_tm":80,"read_time":145,"preview_page_count":4},7971461740909,"https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d","Configuration Manual  \nMSc Research Project Programme Name-MSc in Cybersecurity  \nForename Surname  \nStudent ID: 23110856  \nSchool of Computing  \nNational College of Ireland  \nSupervisor:Joel Aleburu  \nNational College of Ireland  \nMSc Project Submission Sheet  \nSchool of Computing  \nStudent Kunal Sanjaykumar Jadhav  \nName:    \nStudent ID: 23110856  \nProgramme: Msc in Cybersecurity Year: 2023-24  \nModule: Msc research project  \nLecturer: Joel Aleburu  \nSubmission  \nDue Date: 12th August 2024  \nProject Title: Configuration Manual  \n………………………………………………………………………………………………………….………  \nWord Count: ……………………………………… Page Count: ………………………………….…….………  \nI hereby certify that the information contained in this (my submission) is information pertaining to research I conducted for this project. All information other than my own contribution will be fully referenced and listed in the relevant bibliography section at the rear of the project.  \nALL internet material must be referenced in the bibliography section. Students are required to use the Referencing Standard specified in the report template. To use other author's written or electronic work is illegal (plagiarism) and may result in disciplinary action.  \nSignature: Kunal Jadhav  \nDate: 12th August 2024  \nPLEASE READ THE FOLLOWING INSTRUCTIONS AND CHECKLIST  \n\n| Attach a completed copy of this sheet to each project (including multiple copies) | □ |\n| --- | --- |\n| Attach a Moodle submission receipt of the online project submission, to each project (including multiple copies) . | □ |\n| You must ensure that you retain a HARD COPY of the project, both for your own reference and in case a project is lost or mislaid. It is not sufficient to keep a copy on computer. | □ |\n\nAssignments that are submitted to the Programme Coordinator Office must be placed into the assignment box located outside the office.  \n\n| Office Use Only |  |\n| --- | --- |\n| Signature: |  |\n| Date: |  |\n| Penalty Applied (if applicable): |  |\n\nConfiguration Manual  \nForename Surname  \nStudent ID:  \n1.1 Configuration manual for Traditional Method(SNORT)  \n1.2  \nBelow is an illustrated procedure and scenario setup for installing and running Snort for the analysis:  \nSetting Up Snort  \n1. Installation  \n▪ Snort can be installed on Ubuntu using the following commands:  \nsudo apt-get update  \nsudo apt-get install snort  \n▪ Follow the prompts to configure the home network during installation.  \n2. Configuration  \n▪ Snort configuration is done in the snort.conf file, typically located at directory /etc/snort/snort.conf.  \n▪ Set the network variables (e.g., HOME_NET) to match our environment.  \n▪ Include rule files and enable the rules we want Snort to use for detecting intrusions.  \n3. Rules  \n▪ Snort rules file is done in the local .rules file, which we created and located at directory /etc/snort/rules/local.rules.  \n▪ Snort employs rule sets to identify the certain patterns. Here's an example rule for detecting the [HTTP traffic.:](HTTP traffic.:)  \nalert tcp any any -> $HOME NET any (msg:\"[HTTP](HTTP) Traffic Detected\"; sid:1000001;)  \n4. Running Snort  \n• Snort has many modes ofthe operation. To detect, use this given command: sudo snort-A console-q-c /etc/snort/snort.conf--i enp0s3  \n• Replace enp0s3 with the correct network interface.  \n1.2.1.1  \n1.2.1.2 Examples of Snort Rules and Configurations  \n1.2.1.3  \nA basic [HTTP traffic detection](HTTP traffic detection) rule and snort.conf excerpt are below: snort.conf (snippet)  \n\\# Network variables  \nipvar HOME NET 192 .168 .1 .0/24  \nipvar EXTERNAL NET any  \n\\# Include rule files  \ninclude $RULE PATH/local.rules  \nlocal.rules  \nalert tcp any any -> $HOME NET 80 (msg:\"[HTTP](HTTP) Traffic Detected\";  \nsid:1000001;)  \nExample of Running Snort and Generating Alerts  \nRun the Snort console with the following command:  \nsudo snort -A console -q -c /etc/snort/snort.conf -i enp0s3  \nThis will start the Snort tool in the alert mode, capturing every packets on the enp0s3 netwok interface a","cbCaisXsPkX99cxe","https://ap.wps.com/l/cbCaisXsPkX99cxe","pdf",1177366,13,"English","# Configuration Manual\n## Traditional Method (SNORT)\n### Setting Up Snort\n#### Installation\n#### Configuration\n#### Rules\n#### Running Snort\n## Examples of Snort Rules and Configurations\n## Traditional IDS: Snort Configuration and Results\n## Snort Configuration for DDoS Detection\n## Configuration Manual for Machine Learning-Based IDS\n## Implementation on Linux Networks\n### Setting up the Virtualization Environment\n## Tools Required\n## Step-by-Step Instructions","[{\"question\":\"What Snort installation and basic setup commands are provided for Ubuntu?\",\"answer\":\"The document provides commands to update apt repositories and install Snort (sudo apt-get update, sudo apt-get install snort), followed by configuration prompts for the home network environment.\"},{\"question\":\"Where is the Snort configuration file located and what must be configured in it?\",\"answer\":\"It states that snort.conf is typically located at /etc/snort/snort.conf and that network variables such as HOME_NET must match the environment, along with includes for rule files and enabling desired detection rules.\"},{\"question\":\"How does the document suggest running Snort and what does it use to generate alerts?\",\"answer\":\"It instructs running Snort in alert mode using a console command with -c /etc/snort/snort.conf and -i for the interface (e.g., enp0s3 or eth0), while alerts are generated according to local.rules.\"}]","MSc Research Project - Configuration Manual - Traditional Method (SNORT) | PDF",33]