Installing Sagan on CentOS

snort 2012. 2. 1. 19:27 |
언제 짤릴지모르니까 퍼왔음
https://wiki.quadrantsec.com/bin/view/Main/SaganHOWTO 

 You need to add repositories for the libesmtp packages if needed. You can follow the tutorial to add the RPMForge and other repositories for YUM:

http://wiki.centos.org/AdditionalResources/Repositories/RPMForge?action=show&redirect=Repositories%2FRPMForge

Install the packages:
# yum install gcc gnutls-devel mysql mysql-devel mysql-client pcre pcre-devel libesmtp libesmtp-devel
[Note: The gnutls-devel are needed to compile libprelude if you want support for it during Sagan's install, if not you don't need them.]
In order not to confront a problem when building Sagan about mysqlclientl_r (Centos devel packages do not contain the headers necessary) You will need to download from MySQL site a mysql-shared-compat close to your database install version: http://downloads.mysql.com/archives/mysql-5.0/ or http://downloads.mysql.com/archives/mysql-5.1/
# yum info mysql     #  This will show your installed version
Example for MySQL-shared-compat-5.0.91-1.rhel5.i386.rpm :
# cd /tmp
# wget http://downloads.mysql.com/archives/mysql-5.0/MySQL-shared-compat-5.0.91-1.rhel5.i386.rpm
# yum localinstall MySQL-shared-compat-5.0.91-1.rhel5.i386.rpm
Now you can proceed to install libprelude if needed.

The libprelude from Atomic Corp repository libprelude-0.9.21.2-1.el5.art.i386.rpm will not satisfied Sagan's configuration buildup. You will need to download and build libprelude 1.0.0 from their site:
# cd /tmp
# wget http://www.prelude-technologies.com/download/releases/libprelude/libprelude-1.0.0.tar.gz
# tar xvfz libprelude-1.0.0.tar.gz
# cd /libprelude-1.0.0
# ./configure & make && make install
Now install Sagan as per documentation. [ SaganHOWTO ] 

[Note: Remember to use: ./configure --disable-postgresql to install Sagan if you don't need support for PostgreSQL or you will need to install it.]
-- ChampClark - 2010-11-18

'snort' 카테고리의 다른 글

snorby 설치  (0) 2012.02.14
barnyard2 설치  (0) 2012.02.08
snort 성능  (0) 2012.01.26
Snort for Mac OS X  (0) 2011.01.02
간단하게 이벤트 확인  (0) 2010.05.25
Posted by applicationlayer
: