Prerequisite Ubuntu 20.04 with root access Snort 3.0 up and running with community rules Open App ID Elastic Stack up and running In this guide we will visualize Snort3 logs in Kibana. I’ve setup Elastic Stack as an LXC with 300 GB disk space for storing logs. Elasticsearch consumes alot of storage when indexing data….

Follow any guide for setting up bridged network on LXC. Just google it. HOWEVER, if you’ve setup LXC on a VM with bridged network, the hypervisor will BLOCK dhcp requests if you’ve not enabled promiscouse mode on the NIC. In Hyper-V you have to enable mac-spoofing for it to work! Take note! Thank you!

First, make sure that root login is permitted on the host. Use your favorite text editor. Inside the config file, set permit root login to yes Restart SSH Service If you have not set a password for root, do it now. Now, if you have not generated an ssh key, do it now. Send this…