{"id":2312,"date":"2014-07-13T17:49:23","date_gmt":"2014-07-13T08:49:23","guid":{"rendered":"http:\/\/www.hits-net.com\/blog\/?p=2312"},"modified":"2016-03-29T23:07:36","modified_gmt":"2016-03-29T14:07:36","slug":"security-onion-%e5%85%a5%e3%82%8c%e3%81%a6%e3%81%bf%e3%81%9f%e3%82%88","status":"publish","type":"post","link":"https:\/\/www.hits-net.com\/blog\/?p=2312","title":{"rendered":"Security Onion \u5165\u308c\u3066\u307f\u305f\u3088"},"content":{"rendered":"

\u3069\u3082\u3002\u3053\u3093\u3070\u3093\u306f\u3002<\/p>\n

\u306a\u3093\u304b\u3084\u308a\u305f\u3044\u306a\u3068\u601d\u3063\u3066\u5165\u308c\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n

\u5143\u3005\u306fSNORT\u3067\u3082\u5165\u308c\u3088\u3046\u304b\u3068\u3044\u308d\u3044\u308d\u63a2\u3057\u3066\u3001
\n\u300cRazorback Appliance\u300d\u3063\u3066\u3044\u3046VM\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u3092\u5165\u308c\u3066\u307f\u305f\u306e\u3067\u3059\u304c\u3001
\n\u3069\u3046\u3082SNORT\u3092\u3061\u3083\u3093\u3068\u52d5\u304b\u3059\u3053\u3068\u304c\u51fa\u6765\u305a\u30fb\u30fb\u30fbClamAV\u3068\u304b\u3082\u5165\u3063\u3066\u3066\u826f\u3055\u305d\u3046\u3060\u3063\u305f\u306e\u306b\u306a\u30fc\u3002<\/p>\n

\u63a2\u3057\u306a\u304a\u3057\u3066Security Onion\u3063\u3066\u306e\u3092\u898b\u3064\u3051\u307e\u3057\u305f\u3002
\nUbuntu\u30d9\u30fc\u30b9\u306eLinux\u3067\u3059\u306d\u3002<\/p>\n

IDS(Snort or Suricata\u3092\u9078\u629e)\u3068\u30a4\u30d9\u30f3\u30c8\u7ba1\u7406\u306a\u3069\u306e\u3044\u308d\u3093\u306a\u30c4\u30fc\u30eb\u304c\u5165\u3063\u3066\u3044\u307e\u3059\u3057\u3001
\n\u3042\u308c\u3053\u308c\u3057\u306a\u304f\u3066\u3082\u4e00\u6c17\u306b\u8a2d\u5b9a\u304c\u51fa\u6765\u307e\u3059\u3002<\/p>\n

\u3068\u308a\u3042\u3048\u305a\u3001SRX\u306e\u5185\u5074\u306e\u30dd\u30fc\u30c8\u3092\u30df\u30e9\u30fc\u3057\u3066\u6e21\u3057\u3066\u3044\u307e\u3059\u3002
\nPPPoE\u3063\u3066\u3053\u3046\u3044\u3046\u6642\u4e0d\u4fbf\u3067\u3059\u306d\u30fc\u3002\u5916\u5074\u306b\u3069\u3093\u306a\u901a\u4fe1\u304d\u3066\u3044\u308b\u304b\u898b\u3066\u307f\u305f\u3044\u3082\u306e\u3067\u3059\u3002
\n\u203b\u3061\u306a\u307f\u306bVM\u4e0a\u3067\u52d5\u304b\u3057\u3066\u3044\u308b\u306e\u3067\u3001\u4f59\u3063\u305f\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3092\u30d7\u30ed\u30df\u30b9\u30ad\u30e3\u30b9\u30e2\u30fc\u30c9\u306b\u8a2d\u5b9a\u3057\u3066\u5229\u7528\u4e2d\u3002<\/p>\n

\u3046\u30fc\u3093\u3002\u6bce\u5ea6\u3053\u3046\u3044\u3046\u306e\u5165\u308c\u308b\u3068\u6700\u521d\u306f\u9762\u767d\u304f\u3066\u773a\u3081\u3066\u308b\u3093\u3060\u3051\u3069\u3001
\n\u3057\u3070\u3089\u304f\u3057\u305f\u3089\u98fd\u304d\u305d\u3046\u3060\u306a\u3002\u3002\u3002<\/p>\n

\u3042\u3001SNORT\u3063\u3066CISCO\u306b\u8cb7\u53ce\u3055\u308c\u3061\u3083\u3063\u305f\u307d\u3044\u306d\u3002
\nSNORT\u3063\u3066\u304bSourceFire\u304b\u3002<\/p>\n

\u3067\u306f\u3067\u306f\u3002\u307e\u305f\u306e\u6a5f\u4f1a\u306b\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

\u3069\u3082\u3002\u3053\u3093\u3070\u3093\u306f\u3002 \u306a\u3093\u304b\u3084\u308a\u305f\u3044\u306a\u3068\u601d\u3063\u3066\u5165\u308c\u3066\u307f\u307e\u3057\u305f\u3002 \u5143\u3005\u306fSNORT\u3067\u3082\u5165\u308c\u3088\u3046\u304b\u3068\u3044\u308d\u3044\u308d\u63a2\u3057\u3066\u3001 \u300cRazorback Appliance\u300d\u3063\u3066\u3044\u3046VM\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u3092\u5165\u308c\u3066\u307f\u305f\u306e\u3067\u3059\u304c\u3001 \u3069\u3046\u3082SNORT … \u7d9a\u304d\u3092\u8aad\u3080 Security Onion \u5165\u308c\u3066\u307f\u305f\u3088<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[20,5,58,3,68,44,4,29],"tags":[],"class_list":["post-2312","post","type-post","status-publish","format-standard","hentry","category-it","category-linux","category-vmware","category-3","category-68","category-44","category-4","category-29"],"jetpack_publicize_connections":[],"jetpack_shortlink":"https:\/\/wp.me\/p4WH5i-Bi","jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2312"}],"version-history":[{"count":1,"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2312\/revisions"}],"predecessor-version":[{"id":2313,"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2312\/revisions\/2313"}],"wp:attachment":[{"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}