SNMP

Introduction

You can monitor your system’s Web performance quite easily with graphical Linux tools. You’ll learn how to use several in this chapter, including MRTG, which is based on SNMP and monitors raw network traffic, and Webalizer, which tracks Web site hits.

SNMP

Most servers, routers and firewalls keep their operational statistics in object identifiers (OIDs) that you can remotely retrieve via the Simple Network Management Protocol (SNMP). For ease of use, equipment vendors provide Management Information Base (MIB) files for their devices that define the functions of the OIDs they contain. That’s a lot of new terms to digest in two sentences, so take a moment to look more closely.

Install MRTG

If you want to download MRTG you can download from here
Preparing you System for MRTG Instalaltion
First you need to install the required compilers
#apt-get install gcc make g++

Apache 2 Installation with perl support
Follow these instructions to install apache2 with perl support

MRTG Installation
Now we need to install mrtg and snmp
Installing MRTG in Debian, Ubuntu and Kubuntu

Install Denyhosts

Kali ini saya akan mencoba cara menginstall denyhost dan menjalankannya. Denyhost berguna untuk melindungi akses via ssh dari orang tidakmemiliki akses di server kita. Cara kerja denyhost dengan melihat log authentication yang ada di /var/log/auth.log dengan cara memblokir IP address yang login ke server kita dengan password dan username yang salah. Bahasa kerennya Preventing SSH Dictionary Attack . Sehingga IP yang pernah mencoba login ke komputer kita akan dimasukkan daftar Blacklist /etc/hosts.deny. Berikut ini cara melakukan installasi Denyhosts dimana saya disini menggunakan distro Debian Etch.

Installing LogWatch

What’s LogWatch

According its official website, Logwatch is a customizable log analysis system. Logwatch parses through your system’s logs for a given period of time and creates a report analyzing areas that you specify, in as much detail as you require. Logwatch is easy to use and will work right out of the package on most systems.

LogWatch configuration

Since in Engarde’s repositories there still aren’t any Extra Packages for LogWatch you have to download and build it from sources. You can download it from the official home page here.

PortSentry

PortSentry adalah aplikasi yang dirancang untuk mendeteksi adanya scanning port
suatu box dalam model real time.
Perbedaan spesifik dengan IDS seperti Snort adalah portsentry melakukan aksi,
sedangkan snort hanya mendeteksi saja.

Instalasi :
Ambil paket dari
http://sourceforge.net/project/showfiles.php?group_id=80573

lalu ekstrak file tersebut