Sunday, December 10, 2017

Install and configure Suricata at Raspberry Pi

Installation:
# apt-get update; apt-get install suricata
# cp /etc/suricata/suricata.yaml /etc/suricata/suricata.yaml.bak
# cd /etc/suricata/rules
# wget https://rules.emergingthreats.net/open/suricata-2.0/emerging-all.rules
# vi /etc/suricata/suricata.yaml
Guarantee that the line below appears in the suricata.yaml file:
 - emerging-all.rules

Execution:
# suricata -c /etc/suricata/suricata.yaml -i wlan0

Running as a Daemon:
# suricata -c /etc/suricata/suricata.yaml -i wlan0 -D

Reading the alert log:
# tail -n 10 -f /var/log/suricata/fast.log

No comments:

Post a Comment