Shulou(Shulou.com)06/01 Report--

yum install pcre*

yum install gcc-c++

wget https://libdnet.googlecode.com/files/libdnet-1.12.tgz

tar -xzvf libdnet-1.12.tgz

./ configure;make;make install

wget https://www.snort.org/downloads/snort/daq-2.0.4.tar.gz

wget https://www.snort.org/downloads/snort/snort-2.9.7.2.tar.gz

tar xvfz daq-2.0.4.tar.gz

cd daq-2.0.4

./ configure

make

make install

tar xvfz snort-2.9.7.2.tar.gz

cd snort-2.9.7.2

./ configure --enable-sourcefire

make

make install

cp ./ snort-2.9.7.2/etc/snort.conf /etc/snort/

cp ./ snort-2.9.7.2/etc/threshold.conf /etc/snort/

https://www.snort.org/downloads/community/community-rules.tar.gz

tar -zxvf community-rules.tar.gz

cp community-rules/community.rules /etc/snort/rules/

#Start

snort -d -l /var/log/snort -c /etc/snort/snort.conf -D

The relevant settings will be continuously updated [to avoid false positives and omissions in the opening process, is the focus]

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.