Last active
April 1, 2020 17:16
-
-
Save Zobber/70db0594dde499ffc370464e21e7b676 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
sudo apt -y install libpcre3 libpcre3-dbg libpcre3-dev build-essential autoconf | |
automake libtool libpcap-dev libnet1-dev libyaml-0-2 libyaml-dev zlib1g zlib1g-dev | |
libcap-ng-dev libcap-ng0 make libmagic-dev libjansson-dev libjansson4 pkg-config | |
sudo apt-get install libpcre3-dbg libpcre3-dev autoconf automake libtool libpcap-dev libnet1-dev libyaml-dev libjansson4 libcap-ng-dev libmagic-dev libjansson-dev zlib1g-dev pkg-config rustc cargo | |
## For IPTABLES | |
apt-get install libnetfilter-queue-dev libnetfilter-queue1 \ | |
libnetfilter-log-dev libnetfilter-log1 \ | |
libnfnetlink-dev libnfnetlink0 | |
apt install python-pip | |
pip install --upgrade suricata-update | |
ln -s /usr/local/bin/suricata-update /usr/bin/suricata-update | |
sudo apt -y install libnetfilter-queue-dev libnetfilter-queue1 libnfnetlink-dev libnfnetlink0 | |
tar -xvzf suricata-5.0.0.tar.gz | |
cd suricata | |
## Do not optimize the binary for the hardware it is built on. Add this flag if the binary is meant to be portable or if Suricata is to be used in a VM. | |
--disable-gccmarch-native | |
### Without IPS functionality (Intrusion Detection Only) | |
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var | |
### With IPS functionality | |
./configure --enable-geopip --prefix=/usr --sysconfdir=/etc --localstatedir=/var | |
make | |
sudo make install | |
sudo make install-conf | |
## Ubuntu | |
sudo add-apt-repository ppa:oisf/suricata-stable | |
sudo apt update | |
sudo apt install suricata | |
## CentOS | |
yum install epel-release | |
yum install suricata |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment