一、安装配置Snort
安装依赖
sudo apt-get install -y flex bison rpc-compat libsqlite3-0 libpcap0.8 libpcap-dev libpcre3-dev libdumbnet-dev zlib1g-dev libtool
安装libdnet
wget https://nchc.dl.sourceforge.net/project/libdnet/libdnet/libdnet-1.11/libdnet-1.11.tar.gz
tar -zxf libdnet-1.11.tar.gz
cd libdnet-1.11
./configure && sudo make && sudo make install
安装LuaJIT
sudo wget http://luajit.org/download/LuaJIT-2.0.5.tar.gz
sudo tar -zxvf LuaJIT-2.0.5.tar.gz
cd LuaJIT-2.0.5/
sudo make && sudo make install
安装snort和daq
wget https://www.snort.org/downloads/snort/daq-2.0.7.tar.gz --no-check-certificate
tar xvzf daq-2.0.7.tar.gz
cd daq-2.0.7
./configure && sudo make && sudo make install
cd ..
wget https://www.snort.org/downloads/snort/snort-2.9.16.tar.gz
tar xvzf snort-2.9.16.tar.gz
cd snort-2.9.16
./configure --enable-sourcefire && make