Skip to content

Instantly share code, notes, and snippets.

@bluesku
Last active February 5, 2021 16:03
Show Gist options
  • Save bluesku/cb5f4852b34b4955597492dad1197590 to your computer and use it in GitHub Desktop.
Save bluesku/cb5f4852b34b4955597492dad1197590 to your computer and use it in GitHub Desktop.
Installing Sort IDS from Cisto to your Ubuntu
#! /bin/sh
#
## Prepare your System if you feell like, other wise you can skip
#sudo apt-get update
#sudo apt-get dist-upgrade
#Reboot after running the above commands.
#sudo apt-get install build-essential
#
echo '# Getting start Dependencies'
apt-get install -y libpcap-dev libpcre3-dev libdumbnet-dev
apt-get install -y zlib1g-dev liblzma-dev openssl libssl-dev
apt-get bison flex
mkdir -p /root/snort/
cd /root/snort/
# distro web-page: https://www.snort.org/downloads/ 05-fev-21
daq_install () {
wget https://www.snort.org/downloads/snort/daq-2.0.7.tar.gz
tar -xvf daq-2.0.7.tar.gz
cd daq-2.0.7
./configure
make
make install
}
#call function
daq_install
#[-]DEBUGV1 # corrected a unmarked token
echo 'Starting SNORT Instalation at /root/snort ! After running these commands you are ready to install snort!'
echo 'Your PATH DIR /root/snort/ !!!' && pwd
sleep 3
snort_install () {
wget https://www.snort.org/downloads/snort/snort-2.9.17.tar.gz
tar -xvzf snort-2.9.17.tar.gz
rm -v snort-2.9.17.tar.gz
cd snort-2.9.17
./configure --enable-sourcefire
# ^ note: --disable-open-appid is optionaly if u get error, at least was needed for me!
make
make install
ldconfig
ln -s /usr/local/bin/snort /usr/sbin/snort
return 0
}
#call snort
snort_install
echo 'try: ./configure --disable-open-appid is $?'
echo '#Instalation DONE! '
snort -V
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment