yum install pcre*
yum install gcc-c++
wget https://libdnet.googlecode.com/files/libdnet-1.12.tgz
tar -xzvf libdnet-1.12.tgz
./configure;make;make install
wget https://www.snort.org/downloads/snort/daq-2.0.4.tar.gz
wget https://www.snort.org/downloads/snort/snort-2.9.7.2.tar.gz
tar xvfz daq-2.0.4.tar.gz
cd daq-2.0.4
./configure
make
make install
tar xvfz snort-2.9.7.2.tar.gz
cd snort-2.9.7.2
./configure --enable-sourcefire
make
make install
cp ./snort-2.9.7.2/etc/snort.conf /etc/snort/
cp ./snort-2.9.7.2/etc/threshold.conf /etc/snort/
https://www.snort.org/downloads/community/community-rules.tar.gz
tar -zxvf community-rules.tar.gz
cp community-rules/community.rules /etc/snort/rules/
#啟動
snort -d -l /var/log/snort -c /etc/snort/snort.conf -D
相關設定將持續更新[避免開啟過程中的漏報和誤報,是重點]
免責聲明：本站發布的內容（圖片、視頻和文字）以原創、轉載和分享為主，文章觀點不代表本網站立場，如果涉及侵權請聯系站長郵箱：is@yisu.com進行舉報，并提供相關證據，一經查實，將立刻刪除涉嫌侵權內容。
