Installing Snort
Snort is a widely deployed open source intrusion detection and prevention system. You can download and install the source packages from the snort website
wget http://path/to/snort-2.8.1.tar.gz
tar zxf snort-2.8.1.tar.gz
cd snort-2.8.1
./configure
make
make install
ERROR! Libpcap library/headers (libpcap.a (or .so)/pcap.h)
not found, go get it from http://www.tcpdump.org
or use the –with-libpcap-* options, if you have it installed
in unusual place. Also check if your libpcap depends on another
shared library that may be installed in an unusual place
To fix:
yum install libpcap libpcap-devel
After that you have to copy <snort-2.8.1>/etc/snort.conf to /etc/snort/snort.conf. Then edit the settings of snort. Later download the rules and copy under rules folder.
mkdir /etc/snort/snort.conf
mkdir /etc/snort/rules
Recent Comments