Image designed with GPT4 Dall-e
With just one command we can launch Snort on Ubuntu and begin monitoring network traffic. In this lab demo I have an Ubuntu VM and Windows 10 VM on a NAT Network. 1. Open the Linux terminal and switch to SU if you are not already
2. snort -A console -q -u snort -g snort -c /etc/snort/snort.conf -i enp0s3 (enp0s3 is the name of my network connection).
3. From the Windows machine ping Ubuntu and watch for the custom alert in Snort.