[转贴]在家制造你的Cisco IDS （绝对极品）

Sidewinder

完了！

hlf

非常感谢，下去喽......下完后事是不是直接刻成盘就可以用了，看到都是001，002......不需要和并什么的吧？

Sidewinder

要解压成BIN/CUE文件然后刻盘，用WINRAR就可以了。

zhanghui

访问ftp慢的朋友用下面的连接下载http://phoenix.freedemon.org//iso//CISCO.I...1//jgt-cids.binhttp://phoenix.freedemon.org//iso//CISCO.I...2//jgt-idse.bin

sweet191

QUOTE (Sidewinder @ Mar 22 2005, 09:27 PM)
完了！  
  谢谢你的贡献！下载中

sweet191

QUOTE (zhanghui @ Mar 22 2005, 11:25 PM)
访问ftp慢的朋友用下面的连接下载http://phoenix.freedemon.org//iso//CISCO.I...1//jgt-cids.binhttp://phoenix.freedemon.org//iso//CISCO.I...2//jgt-idse.bin  
  不能访问啊

fjingxu

楼上给的ftp正在下，速度很快呀。谢了。

jyhuang

谢谢兄弟了

fjingxu

呵呵，vmware下已经成功了。哈哈。

sweet191

QUOTE (fjingxu @ Mar 23 2005, 12:35 PM)
呵呵，vmware下已经成功了。哈哈。  
  恭喜,不知道什么地方有关于CISCO IDS的资料.说明文档什么的。下了一晚上，现在CD2,008

hlf

CISCO的文档http://www.cisco.com/univercd/cc/td/doc/pr...csids/index.htm

fjingxu

是呀，我现在也在找这方面的东西。不过。我看了一下输出。可能有不对头的地方。大家帮忙看一下，是不是正常signatures SIGID 4507 SubSig 35 exitsignatures SIGID 4507 SubSig 36 exitsignatures SIGID 4507 SubSig 37 exitsignatures SIGID 4509 SubSig 0 exit    signatures SIGID 4510 SubSig 0 exitsignatures SIGID 4511 SubSig 0 exitexitSERVICE.SSHsignatures SIGID 3650 SubSig 0 exitsignatures SIGID 3651 SubSig 0 exitexitSTATE.STRING.CISCOLOGINsignatures SIGID 3600 SubSig 0 exitsignatures SIGID 3601 SubSig 0 exitsignatures SIGID 3603 SubSig 0 exitexitSTATE.STRING.LPRFORMATSTRINGsignatures SIGID 6210 SubSig 0 exitexit STRING.ICMPsignatures SIGID 2155 SubSig 0 exitexitSTRING.TCPsignatures SIGID 3730 SubSig 0 exitsignatures SIGID 3730 SubSig 1 exitsignatures SIGID 5375 SubSig 0 exitsignatures SIGID 5366 SubSig 0 exitsignatures SIGID 3604 SubSig 0 exitsignatures SIGID 5365 SubSig 0 exitsignatures SIGID 5351 SubSig 0 exitsignatures SIGID 3314 SubSig 0 exitsignatures SIGID 3175 SubSig 0 exitsignatures SIGID 3652 SubSig 0 exit    signatures SIGID 3402 SubSig 0 exitsignatures SIGID 3402 SubSig 1 exitsignatures SIGID 3402 SubSig 2 exitsignatures SIGID 3402 SubSig 3 exitsignatures SIGID 3402 SubSig 4 exitsignatures SIGID 3173 SubSig 0  exitsignatures SIGID 3465 SubSig 0 exitsignatures SIGID 3502 SubSig 0 exitsignatures SIGID 5158 SubSig 0 exitsignatures SIGID 5237 SubSig 0 exitsignatures SIGID 3111 SubSig 0 exitsignatures SIGID 3111 SubSig 1 exit    signatures SIGID 3114 SubSig 0 exitsignatures SIGID 3116 SubSig 0 exitsignatures SIGID 3117 SubSig 0 exitsignatures SIGID 3117 SubSig 1 exitsignatures SIGID 3118 SubSig 0 exitsignatures SIGID 3119 SubSig 0 exitsignatures SIGID 3120 SubSig 0 exitsignatures SIGID 3120 SubSig 1 exitsignatures SIGID 3121 SubSig 0 exitsignatures SIGID 3122 SubSig 0 exitsignatures SIGID 3150 SubSig 0 exitsignatures SIGID 3151 SubSig 0 exit    signatures SIGID 3152 SubSig 0 exitsignatures SIGID 3155 SubSig 0 exitsignatures SIGID 3156 SubSig 0 exitsignatures SIGID 3158 SubSig 0 exitsignatures SIGID 3159 SubSig 0 exitsignatures SIGID 3160 SubSig 0 exitsignatures SIGID 3161 SubSig 0 exitsignatures SIGID 3161 SubSig 1 exitsignatures SIGID 3162 SubSig 0 exitsignatures SIGID 3163 SubSig 0 exitsignatures SIGID 3164 SubSig 0 exitsignatures SIGID 3165 SubSig 0 exit    signatures SIGID 3166 SubSig 0 exitsignatures SIGID 3167 SubSig 0 exitsignatures SIGID 3168 SubSig 0 exitsignatures SIGID 3169 SubSig 0 exitsignatures SIGID 3170 SubSig 0 exitsignatures SIGID 3171 SubSig 0 exitsignatures SIGID 3171 SubSig 1 exitsignatures SIGID 3172 SubSig 0 exitsignatures SIGID 3205 SubSig 0 exitsignatures SIGID 3206 SubSig 0 exitsignatures SIGID 3207 SubSig 0 exitsignatures SIGID 3400 SubSig 0 exit    signatures SIGID 3401 SubSig 0 exitsignatures SIGID 3401 SubSig 1 exitsignatures SIGID 3403 SubSig 0 exitsignatures SIGID 3404 SubSig 0 exitsignatures SIGID 3405 SubSig 0 exitsignatures SIGID 3406 SubSig 0 exitsignatures SIGID 3450 SubSig 0 exitsignatures SIGID 3451 SubSig 0 exitsignatures SIGID 3452 SubSig 0 exitsignatures SIGID 3453 SubSig 0 exitsignatures SIGID 3454 SubSig 0 exitsignatures SIGID 3455 SubSig 0 exit    signatures SIGID 3456 SubSig 0 exitsignatures SIGID 3456 SubSig 1 exitsignatures SIGID 3456 SubSig 3 exitsignatures SIGID 3457 SubSig 0 exitsignatures SIGID 3458 SubSig 0 exitsignatures SIGID 3459 SubSig 0 exitsignatures SIGID 3459 SubSig 1 exitsignatures SIGID 3461 SubSig 0 exitsignatures SIGID 3462 SubSig 0 exitsignatures SIGID 3463 SubSig 0 exitsignatures SIGID 3464 SubSig 0 exitsignatures SIGID 3500 SubSig 0 exit    signatures SIGID 3501 SubSig 0 exitsignatures SIGID 3525 SubSig 0 exitsignatures SIGID 3526 SubSig 0 exitsignatures SIGID 3540 SubSig 0 exitsignatures SIGID 3550 SubSig 0 exitsignatures SIGID 3551 SubSig 0 exitsignatures SIGID 3575 SubSig 0 exitsignatures SIGID 3576 SubSig 0 exitsignatures SIGID 3602 SubSig 0 exitsignatures SIGID 3700 SubSig 0 exitsignatures SIGID 3703 SubSig 0 exitsignatures SIGID 3704 SubSig 0 exit    signatures SIGID 3706 SubSig 0 exitsignatures SIGID 3707 SubSig 0 exitsignatures SIGID 3708 SubSig 0 exitsignatures SIGID 3709 SubSig 0 exitsignatures SIGID 3711 SubSig 0 exitsignatures SIGID 3714 SubSig 0 exitsignatures SIGID 3728 SubSig 0 exitsignatures SIGID 3729 SubSig 0 exitsignatures SIGID 3731 SubSig 0 exitsignatures SIGID 5310 SubSig 0 exitsignatures SIGID 5317 SubSig 0 exitsignatures SIGID 5318 SubSig 0 exit    signatures SIGID 5330 SubSig 0 exitsignatures SIGID 6250 SubSig 0 exitsignatures SIGID 6251 SubSig 0 exitsignatures SIGID 6252 SubSig 0 exitsignatures SIGID 6253 SubSig 0 exitsignatures SIGID 6350 SubSig 0 exitsignatures SIGID 6508 SubSig 0 exitsignatures SIGID 5367 SubSig 0 exitsignatures SIGID 3325 SubSig 0 exitsignatures SIGID 11002 SubSig 0 exitsignatures SIGID 11001 SubSig 0 exitsignatures SIGID 11003 SubSig 0 exit    signatures SIGID 11004 SubSig 0 exitsignatures SIGID 11005 SubSig 0 exitsignatures SIGID 11006 SubSig 0 exitsignatures SIGID 11007 SubSig 0 exitsignatures SIGID 11008 SubSig 0 exitsignatures SIGID 11009 SubSig 0 exitsignatures SIGID 11010 SubSig 0 exitsignatures SIGID 11011 SubSig 0 exitsignatures SIGID 11012 SubSig 0 exitsignatures SIGID 11013 SubSig 0 exitsignatures SIGID 3732 SubSig 0 exitsignatures SIGID 3326 SubSig 0 exit    signatures SIGID 11014 SubSig 0 exitsignatures SIGID 11015 SubSig 0 exitsignatures SIGID 11016 SubSig 0 exitsignatures SIGID 11200 SubSig 0 exitsignatures SIGID 11201 SubSig 0 exitsignatures SIGID 11202 SubSig 0 exitsignatures SIGID 11203 SubSig 0 exitsignatures SIGID 5378 SubSig 0 exitsignatures SIGID 5379 SubSig 0 exitsignatures SIGID 11204 SubSig 0 exitexitSTRING.UDPsignatures SIGID 4701 SubSig 0 exit    signatures SIGID 4613 SubSig 0 exitsignatures SIGID 11000 SubSig 0 exitsignatures SIGID 11000 SubSig 1 exitsignatures SIGID 11000 SubSig 2 exitsignatures SIGID 4054 SubSig 0 exitsignatures SIGID 4054 SubSig 1 exitsignatures SIGID 4058 SubSig 0 exitsignatures SIGID 4060 SubSig 0 exitsignatures SIGID 4060 SubSig 1 exitsignatures SIGID 4100 SubSig 0 exitsignatures SIGID 4101 SubSig 0 exitsignatures SIGID 4150 SubSig 0 exit    signatures SIGID 4601 SubSig 0 exitsignatures SIGID 4601 SubSig 1 exitsignatures SIGID 4601 SubSig 2 exitsignatures SIGID 4601 SubSig 3 exitsignatures SIGID 4603 SubSig 0 exitsignatures SIGID 4604 SubSig 0 exitsignatures SIGID 4605 SubSig 0 exitsignatures SIGID 4606 SubSig 0 exitsignatures SIGID 4607 SubSig 0 exitsignatures SIGID 4607 SubSig 1 exitsignatures SIGID 4607 SubSig 2 exitsignatures SIGID 4607 SubSig 3 exit    signatures SIGID 4607 SubSig 4 exitsignatures SIGID 4608 SubSig 0 exitsignatures SIGID 4608 SubSig 1 exitsignatures SIGID 4608 SubSig 2 exitsignatures SIGID 4609 SubSig 0 exitsignatures SIGID 4610 SubSig 0 exitsignatures SIGID 6505 SubSig 0 exitsignatures SIGID 6506 SubSig 0 exitsignatures SIGID 6508 SubSig 1 exitsignatures SIGID 4611 SubSig 0 exitsignatures SIGID 4612 SubSig 0 exitexitSWEEP.HOST.ICMPsignatures SIGID 2100 SubSig 0 exitsignatures SIGID 2101 SubSig 0 exitsignatures SIGID 2102 SubSig 0 exitexitSWEEP.HOST.TCPsignatures SIGID 3030 SubSig 0 exitsignatures SIGID 3031 SubSig 0 exitsignatures SIGID 3032 SubSig 0 exitsignatures SIGID 3033 SubSig 0 exitsignatures SIGID 3034 SubSig 0 exitsignatures SIGID 3035 SubSig 0 exitsignatures SIGID 3036 SubSig 0 exitsignatures SIGID 3037 SubSig 0 exit    exitSWEEP.MULTIsignatures SIGID 6001 SubSig 0 exitsignatures SIGID 6002 SubSig 0 exitexitSWEEP.OTHER.TCPsignatures SIGID 3045 SubSig 0 exitsignatures SIGID 3046 SubSig 0 exitexitSWEEP.PORT.TCPsignatures SIGID 3001 SubSig 0 exitsignatures SIGID 3002 SubSig 0 exitsignatures SIGID 3003 SubSig 0 exitsignatures SIGID 3005 SubSig 0 exitsignatures SIGID 3006 SubSig 0 exit    signatures SIGID 3010 SubSig 0 exitsignatures SIGID 3011 SubSig 0 exitsignatures SIGID 3012 SubSig 0 exitsignatures SIGID 3015 SubSig 0 exitsignatures SIGID 3016 SubSig 0 exitsignatures SIGID 3020 SubSig 0 exitsignatures SIGID 3021 SubSig 0 exitexitSWEEP.PORT.UDPsignatures SIGID 4003 SubSig 0 exitsignatures SIGID 4001 SubSig 0 exitexitTRAFFIC.ICMPsignatures SIGID 6300 SubSig 0 exit    signatures SIGID 6302 SubSig 0 exitsignatures SIGID 6501 SubSig 0 exitsignatures SIGID 6502 SubSig 0 exitsignatures SIGID 6503 SubSig 0 exitsignatures SIGID 6504 SubSig 0 exitexitTROJAN.BO2Ksignatures SIGID 3990 SubSig 1 exitsignatures SIGID 3990 SubSig 2 exitsignatures SIGID 3991 SubSig 0 exitsignatures SIGID 3992 SubSig 1 exitsignatures SIGID 3992 SubSig 2 exitsignatures SIGID 3992 SubSig 3 exit    signatures SIGID 3992 SubSig 4 exitsignatures SIGID 3992 SubSig 5 exitexitTROJAN.TFN2Ksignatures SIGID 6507 SubSig 0 exitexitTROJAN.UDPsignatures SIGID 4055 SubSig 1 exitsignatures SIGID 4055 SubSig 2 exitsignatures SIGID 4053 SubSig 0 exitexitSERVICE.MSSQLsignatures SIGID 3702 SubSig 0  exitexitexitexit! ------------------------------service alarm-channel-configuration virtualAlarmtune-alarm-channelexitexit

dragoncn

正常的

bird123

配置应该不用这么复杂的，以下是我的方法：系统缺省用户名：cisco，密码：cisco，登陆后，系统强制修改口令配置服务帐号config tusername user1 priviledge service设置完密码推出，以服务帐号登陆，进入Linux系统，su转换到root用户，密码与服务帐号的密码相同cat /proc/cpuinfo | grep "^cpu MHz"（在我的电脑上显示cpu MHz         : 634.774）编辑/etc/init.d/ids_functions，找到if [[ `isCPU 567` -eq $TRUE && $NUM_OF_PROCS -eq 1 ]]; then这行把567修改成你的cpu主频，这样就变成了IDS4210。

cillery

给个论坛的地址和拥护名和密码个我啊.我想下一个!!!感谢!