3. NIDS Setup

In this chapter it will be described how to setup NIDS Server. The NIDS Server setup requires installing and configuring the following:

• Ubintu 16.04 LTS Server
• Snort & TShark
• IDS Tools
• Logstash
• Importing the data into Elasticsearch and Kibana

• 3.1. Install the Core Components of the NIDS Server
  • 3.1.2. Ubuntu 16.04 LTS Server Installation
  • 3.1.3. Install the Core Components
    • Changing the Network Interfaces Names Back to ethX
    • Setting up the Network Interfaces for Snort
    • Install SSH Server
    • Install Logstash
    • Install Snort and TShark
• 3.2. NIDS Server Configuration
  • 3.2.1. LogStash Configuration
  • 3.2.2. Starting LogStash, TShark & Snort