title: 安装Snort完全版(一) date: 2019-10-22 10:50:00 categories:
•[蓝队,Snort篇] tags:•snort
安装Snort完全版(一)
本篇文章将会成功安装snort,barnyard2,mariadb。snort产生的log会通过barnyard2存储进mariadb数据库
环境:Centos7
0x01 安装依赖组件
1.1 安装基础组件
yum install -y wget svn gcc gcc-c++ flex bison zlib zlib-devel pcre pcre-devel libtool curl man libxml2 make libpcap tcpdump git
1.2 安装libdnet
wget http://pkgs.fedoraproject.org/repo/pkgs/libdnet/libdnet-1.12.tgz/9253ef6de1b5e28e9c9a62b882e44cc9/libdnet-1.12.tgztar -xzvf libdnet-1.12.tgz./configure "CFLAGS=-fPIC" --prefix=/usr --libdir=/usr/lib64makemake install
1.3 安装libpcap
# 下载:wget http://www.tcpdump.org/release/libpcap-1.7.4.tar.gz# 解压:tar zxvf libpcap-1.7.4.tar.gzcd libpcap-1.7.4/# 编译:./configure --prefix=/usr --libdir=/usr/lib64# 安装:makemake install
1.4 安装LuaJIT
不安装LuaJIT的话,在后边configure snort的话会显示ERROQ!LuaJIT library not found.
# 安装wget http://luajit.org/download/LuaJIT-2.0.5.tar.gz# 解压tar -xzvf LuaJIT-2.0.5# 安装makemake install
0x02 安装MariaDB
yum -y install mariadb-server mariadb mariadb-devel*# 不装mariadb-devel* 后面编译barnyard2会报错:cannot find mysql headersystemctl start mariadb.servicesystemctl enable mariadb.service# 修改数据库密码set password for 'root'@'localhost' = password('')
0x03 安装DAQ
3.1 安装libmnl
# 下载:wget https://www.netfilter.org/projects/libmnl/files/libmnl-1.0.4.tar.bz2# 解压:tar -jxf libmnl-1.0.4.tar.bz2cd libmnl-1.0.4/# 编译