{"id":14118,"date":"2022-01-20T19:20:14","date_gmt":"2022-01-20T19:20:14","guid":{"rendered":"https:\/\/linuxways.net\/?p=14118"},"modified":"2022-01-20T19:20:14","modified_gmt":"2022-01-20T19:20:14","slug":"how-to-install-snort-on-ubuntu-20-04","status":"publish","type":"post","link":"https:\/\/linuxways.net\/de\/ubuntu\/how-to-install-snort-on-ubuntu-20-04\/","title":{"rendered":"How to Install Snort on Ubuntu 20.04"},"content":{"rendered":"

Introduction<\/h2>\n

Snort is a useful open source to protect against network intrusion on the system also known as NIDS. Over a specific network interface, Snort can monitor packet data sent and received.<\/p>\n

Using signature-based detection and protocol analysis technologies NIDS can detect threats that target weaknesses and vulnerabilities in your system. Once you have installed and configured it correctly, NIDS software can identify different types of attacks and suspicions.<\/p>\n

Here we will guide you on how to install Snort on Ubuntu 20.04 as we go through below.<\/p>\n

Step 1 – Update the system<\/h2>\n

Run the apt command to update:<\/p>\n

$ sudo apt update<\/pre>\n
Output:<\/p>\n
<\/p>\n
Step 2 – Install required libraries<\/h2>\n
Run the following command:<\/p>\n
$ sudo apt-get install build-essential libpcap-dev libpcre3-dev libnet1-dev zlib1g-dev luajit hwloc libdnet-dev libdumbnet-dev bison flex liblzma-dev openssl libssl-dev pkg-config libhwloc-dev cmake cpputest libsqlite3-dev uuid-dev libcmocka-dev libnetfilter-queue-dev libmnl-dev autotools-dev libluajit-5.1-dev libunwind-dev<\/pre>\n
Output:<\/p>\n
<\/p>\n
After completing the installation. create a directory containing the compilation and source files for Snort:<\/p>\n
$ mkdir snort-source-files<\/pre>\n
$ cd snort-source-files<\/pre>\n
Then install LibDAQ<\/strong>:<\/p>\n
$ git clone https:\/\/github.com\/snort3\/libdaq.git<\/a><\/pre>\n
Output:<\/p>\n
<\/p>\n
Run the following commands:<\/p>\n
$ cd libdaq<\/pre>\n
$ .\/bootstrap<\/pre>\n
$ .\/configure<\/pre>\n
$ make<\/pre>\n
$ sudo make install<\/pre>\n
Then install Tcmalloc<\/strong>:<\/p>\n
$ cd ..\/<\/pre>\n
$ wget https:\/\/github.com\/gperftools\/gperftools\/releases\/download\/gperftools-2.9.1\/gperftools-2.9.1.tar.gz<\/a><\/pre>\n
$ tar xzf gperftools-2.9.1.tar.gz<\/pre>\n
$ cd gperftools-2.9.1\/<\/pre>\n
$ .\/configure<\/pre>\n
$ make<\/pre>\n
$ sudo make install<\/pre>\n
Step 3 – Installing Snort 3<\/h2>\n
1. Run the following commands:<\/p>\n
$ cd ..\/<\/pre>\n
$ git clone git:\/\/github.com\/snortadmin\/snort3.git<\/pre>\n
Output: <\/p>\n
2. Navigate to the snort3<\/strong> directory<\/p>\n
$ cd snort3\/<\/pre>\n
3. Configure and enable tcmalloc<\/strong><\/p>\n
$ .\/configure_cmake.sh --prefix=\/usr\/local --enable-tcmalloc<\/pre>\n
4. Navigate to the build<\/strong> directory to compile and install Snort 3<\/p>\n
$ cd build<\/pre>\n
$ make<\/pre>\n
$ sudo make install<\/pre>\n
5. Update shared libraries<\/p>\n
$ sudo ldconfig<\/pre>\n
6. Create a symlink for \/usr\/sbin\/snort, run the command:<\/p>\n
$ sudo ln -s \/usr\/local\/bin\/snort \/usr\/sbin\/snort<\/pre>\n
7. Check if the installation was successful<\/p>\n
$ snort -V<\/pre>\n
Output: <\/p>\n
Conclusion<\/h2>\n
The article above has shown you how to install Snort on Ubuntu 20.04.<\/p>\n
Thanks for reading!<\/p>","protected":false},"excerpt":{"rendered":"
Introduction Snort is a useful open source to protect against network intrusion on the system also known as NIDS. Over a specific network interface, Snort can monitor packet…<\/p>","protected":false},"author":1,"featured_media":14245,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[859,100],"class_list":["post-14118","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ubuntu","tag-snort","tag-ubuntu-20-04"],"_links":{"self":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts\/14118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/comments?post=14118"}],"version-history":[{"count":0,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts\/14118\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/media\/14245"}],"wp:attachment":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/media?parent=14118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/categories?post=14118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/tags?post=14118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}