weixin_45504433的博客

1.suricata安装./configure./make./make install-full2.配置/usr/local/etc/suricata/suricata.yaml配置syslog输出为yes3.运行suricata -c suricata.yuml -s ./rules -i ens0配置系统日志输出：/etc/rsyslog.d/rsyslog.conf启动rsyslog失败(个人重启时遇到问题，配置文件第36行注释掉后重启成功)删除/var/lib/rsyslo

suricata安装./configure 报错：error: pcre.h not found安装pcre-develyum install pcre-devel./configure最后会提示安装yum install zlib-devel重新./configuremakemake install

问题使用命令iptables -t mangle -A POSTROUTING -o bridge0 -j TTL --ttl-set 50ttl没有变换解决办法：启动bridge-nf方式：编辑文件vim /etc/sysctl.conf 添加：net.bridge.bridge-nf-call-ip6tables = 1net.bridge.bridge-nf-call-iptab...

Netfilter内核态修改TTL#myhook.c#include <linux/kernel.h>#include <linux/module.h>#include <linux/ip.h>#include <linux/tcp.h>#include <linux/udp.h>#include <linux/icm...

iptables 创建新链创建引用添加规则删除链清空自定义链规则：删除链引用规则：删除自定义链：重命名链创建iptables -t filter -N newchain引用iptables -t filter -I INPUT -j newchain添加规则iptables -t filter -I newchain -p tcp -j REJECT删除链清空自定义链规则：ipt...