1、安装依赖包
yum install –y gcc flex bison zlib* libpcap* tcpdump gcc-c++ zlib* libdnet libdnet-devel pcre*
2、安装libdnet
wget https://phoenixnap.dl.sourceforge.net/project/libdnet/libdnet/libdnet-1.11/libdnet-1.11.tar.gz
tar -zxvf libdnet-1.11.tar.gz
cd libdnet-1.11
./configure
make
make install
3、安装libpcap
wget http://www.tcpdump.org/release/libpcap-1.8.1.tar.gz
tar -zxvf libpcap-1.8.1.tar.gz
cd libpcap-1.8.1
./configure
make
make install
4、安装DAQ
wget https://www.snort.org/downloads/snort/daq-2.0.6.tar.gz
tar -zxvf daq-2.0.6.tar.gz
cd daq-2.0.6
./configure
make
make install
5、安装Snort
wget https://www.snort.org/downloads/archive/snort/snort-2.9.11.1.tar.gz
tar -zxvf snort-2.9.11.1.tar.gz
cd snort-2.9.11.1
./configure --prefix=/usr/local/snort --enable-pthread --enable-gre --enable-mpls --enable-targetbased
make
make install
验证
输入:#snort -V
出现一头小猪,并显示正确的版本号,说明snort已经安装成功。
运行#snort –V出现:
错误:找不到命令。原因是系统找不到snort的路径。
解决:
执行命令:
export PATH&