lanakod/snort-docker
1
0
Fork 0
mirror of https://github.com/Lanakod-Networks/snort-docker.git synced 2025-07-04 13:26:38 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity
11 Commits 1 Branch 0 Tags 6.5 MiB
Lua 94.9%
Dockerfile 4.7%
Shell 0.4%
master
Go to file
Maxim Malakhov f37efe778f
Added some docs
2024-08-23 14:30:45 +03:00
configs Removed logs, .env, updated snort conf 2024-08-23 14:08:41 +03:00
grafana ELK + Grafana 2024-08-22 13:20:45 +03:00
logs Removed logs, .env, updated snort conf 2024-08-23 14:08:41 +03:00
scripts ELK + Grafana 2024-08-22 13:20:45 +03:00
tars ELK + Grafana 2024-08-22 13:20:45 +03:00
.env.example Removed logs, .env, updated snort conf 2024-08-23 14:08:41 +03:00
.gitignore Removed logs, .env, updated snort conf 2024-08-23 14:08:41 +03:00
docker-compose.yml ELK + Grafana 2024-08-22 13:20:45 +03:00
Dockerfile ELK + Grafana 2024-08-22 13:20:45 +03:00
LICENSE Added some docs 2024-08-23 14:30:45 +03:00
README.md Added some docs 2024-08-23 14:30:45 +03:00
SECURITY.md Added some docs 2024-08-23 14:30:45 +03:00

README.md

Snort-docker

GitHub

How to deploy

git clone https://github.com/Lanakod/snort-docker.git
cd snort-docker
cp .env.example .env
# Edit ".env" file via "nano .env" or "vi .env"
docker compose up -d
# Grafana will be hosted on port 3000 and ELK on 5601

Configuration

configs
 ┣ snort-conf
 ┃ ┣ balanced.lua
 ┃ ┣ connectivity.lua
 ┃ ┣ file_magic.rules
 ┃ ┣ inline.lua
 ┃ ┣ max_detect.lua
 ┃ ┣ security.lua
 ┃ ┣ sensitive_data.rules
 ┃ ┣ snort.lua
 ┃ ┣ snort_defaults.lua
 ┃ ┗ talos.lua
 ┣ filebeat.yml
 ┣ logstash.conf
 ┣ promtail.yml
 ┣ snort.rules
 ┗ supervisord.conf
  • snort.rules - your custom written rules for snort
  • filebeat.yml - config file for filebeat | needed for ELK
  • logstash.yml - config file for logstash | needed for ELK
  • promtail.yml - config file for promtail | needed for Grafana
  • supervisord.conf - config file that runs snort in supervisor
  • snorf-conf - folder with all snort config files written in lua
grafana
 ┗ provisioning
 ┃ ┗ datasources
 ┃ ┃ ┗ loki.yml
  • In grafana folder can be found loki.yml file

Contact

  • For any security issues, please do not create a public issue on GitHub, instead please write to security@lanakod.ru

License

snort-docker is MIT licensed.