Linux中安装snort

以下是在Linux中安装snort的步骤：

1.安装依赖项

sudo apt-get update
sudo apt-get install -y build-essential libpcap-dev libpcre3-dev libdumbnet-dev bison flex zlib1g-dev liblzma-dev openssl libssl-dev ethtool

2.下载和安装snort

wget https://www.snort.org/downloads/snort/snort-2.9.17.tar.gz
tar -xvzf snort-2.9.17.tar.gz
cd snort-2.9.17
./configure --enable-sourcefire --disable-open-appid
make
sudo make install

3.更新共享库

sudo ldconfig

4.创建符号链接

sudo ln -s /usr/local/bin/snort /usr/sbin/snort

5.添加规则

sudo mkdir /etc/snort/rules
sudo touch /etc/snort/rules/my.rules
sudo echo 'include $RULE_PATH/my.rules' >> /etc/snort/snort.conf

6.启动snort

sudo snort -l snort_log/ -c /etc/snort/snort.conf -K ascii