1. 前期環境準備
- sudo yum -y install gcc libpcap-devel pcre-devel libyaml-devel file-devel zlib-devel jansson-devel nss-devel libcap-ng-devel libnet-devel tar make libnetfilter_queue-devel lua-devel PyYAML libmaxminddb-devel rustc cargo lz4-devel
- 下載Suricata: wget https://www.openinfosecfoundation.org/download/suricata-5.0.3.tar.gz2
2. 安裝suricata
-
tar zxvf suricata-5.0.3.tar.gz2
-
cd suricata-5.0.3
-
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-nfqueue --enable-lua
-
make
-
make install
-
make install-conf
-
make install-rules(mac下make install-full)
3. 其他說明
- 配置文件位於 /etc/suricata/suricata.yaml
- 執行make install-rules成功後，規則默認位於/var/lib/suricata/rules下面