Window版本要裝Mysql 和一些套件不太方便
改裝Centos版本試試看
先裝作業系統 Centos 7
第一步 更新系統
yum update -y
yum install epel-release –y
第二步 安裝 snort
yum install https://www.snort.org/downloads/snort/snort-2.9.16.1-1.centos8.x86_64.rpm -y
第三步 安裝其他套件
yum install gcc gcc-c++ libnetfilter_queue libnetfilter_queue-devel git flex bison zlib zlib-devel pcre pcre-devel libdnet libdnet-devel tcpdump libnghttp2 wget xz-devel lzma – y
為了抓封包的需求 所以要關掉
ethtool -K eth1 gro off
ethtool -K eth1 lro off
我的網卡是 ens160
ethtool -K ens160 lro off
ethtool -K ens160 lro off
cd root
wget https://download-ib01.fedoraproject.org/pub/epel/7/x86_64/Packages/d/daq-2.0.6-1.el7.x86_64.rpm
wget https://www.snort.org/downloads/snort/snort-2.9.16.1-1.centos8.x86_64.rpm
rpm –ivh daq-2.0.6-1.el7.x86_64.rpm snort-2.9.16.1-1.centos8.x86_64.rpm
註冊並下載 rules
https://www.snort.org/downloads/#rule-downloads
tar xvzf snortrules-snapshot-29161.tar.gz -C /etc/snort
snort –v