For more detailed usage of tcpdump, see its man page. The command screen will scroll up until you interrupt and when we execute the tcpdump command it will captures from all the interfaces, however with -i switch only capture from the desired interface. Install tcpdump opkg install tcpdump Run tcpdump get list of interfaces ifconfig do tcpdump on lan interface 'br-lan' tcpdump -i br-lan -n dump for http traffic tcpdump -i br-lan port 80 dump for ssh traffic on wan, but do not show self tcpdump -i eth0 port 22 and not host 192.168.1.7.

Don't forget to Remove/Uncomment LoadModule unique_id_module modules/mod_unique_id. Once the tcpdump tool is installed on your system, you can continue to browse the following commands with their examples.

Sql-function-names.data do cp rules/$rule activated_rules/ doneĬp rules/ activated_rules/nfĬp /home/ec2-user/work/modsec-master/ /etc/modsecurity/ Include /etc/modsecurity/nfĪctivating sqli,xss,scanner detection rules mkdir /etc/modsecurity LoadModule security2_module modules/mod_security2.so Ln -s /usr/local/modsecurity/lib/mod_security2.so /etc/httpd/modules/Ĭat > /etc/httpd//nf Can you ping the VMX If you are seeing the traffic, then it is a local configuration issue on the Linux box. Are you seeing the syslog traffic If not, is the AWS security group allowing the traffic.

Yum install gcc-c++ autoconf automake openssl-devel flex curl-devel curl libxml2-devel doxygen zlib zlib-devel libtool pcre pcre-devel geoip geoip-devel lua lua-devel httpd24 httpd24-devel mod24_ssl -y Install tcpdump, and try some commands like: tcpdump src tcpdump -n udp.

sudo systemd systemd-sysv tcpdump ubuntu-minimal ubuntu-release-upgrader-core. Yum install git telnet tcpdump mlocate htop -y Installing the Maria DB in Ubuntu AWS EC2 instance for testing MySQL. Install depedencies yum install ssdeep ssdeep-devel byobu lmdb lmdb-libs lmdb-devel -enablerepo=epel -y We need 3 rpm packages rpms/bison-3.0.86_64.rpm Setup ModSecurity in AWS EC2 AMI Download dependencies

Install tcpdump on ec2