Skip to content

Instantly share code, notes, and snippets.

@Zobber
Last active April 1, 2020 17:16
Show Gist options
  • Save Zobber/70db0594dde499ffc370464e21e7b676 to your computer and use it in GitHub Desktop.
Save Zobber/70db0594dde499ffc370464e21e7b676 to your computer and use it in GitHub Desktop.
sudo apt -y install libpcre3 libpcre3-dbg libpcre3-dev build-essential autoconf
automake libtool libpcap-dev libnet1-dev libyaml-0-2 libyaml-dev zlib1g zlib1g-dev
libcap-ng-dev libcap-ng0 make libmagic-dev libjansson-dev libjansson4 pkg-config
sudo apt-get install libpcre3-dbg libpcre3-dev autoconf automake libtool libpcap-dev libnet1-dev libyaml-dev libjansson4 libcap-ng-dev libmagic-dev libjansson-dev zlib1g-dev pkg-config rustc cargo
## For IPTABLES
apt-get install libnetfilter-queue-dev libnetfilter-queue1 \
libnetfilter-log-dev libnetfilter-log1 \
libnfnetlink-dev libnfnetlink0
apt install python-pip
pip install --upgrade suricata-update
ln -s /usr/local/bin/suricata-update /usr/bin/suricata-update
sudo apt -y install libnetfilter-queue-dev libnetfilter-queue1 libnfnetlink-dev libnfnetlink0
tar -xvzf suricata-5.0.0.tar.gz
cd suricata
## Do not optimize the binary for the hardware it is built on. Add this flag if the binary is meant to be portable or if Suricata is to be used in a VM.
--disable-gccmarch-native
### Without IPS functionality (Intrusion Detection Only)
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var
### With IPS functionality
./configure --enable-geopip --prefix=/usr --sysconfdir=/etc --localstatedir=/var
make
sudo make install
sudo make install-conf
## Ubuntu
sudo add-apt-repository ppa:oisf/suricata-stable
sudo apt update
sudo apt install suricata
## CentOS
yum install epel-release
yum install suricata
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment