Hello Linux Geeksters. As you may know, Suricata is an open source Network IDS, IPS and Network Security Monitoring engine, developed by the Open Information Security Foundation (OISF). The latest version available is Suricata 2.0.4, which has been recently released, coming with the below bug-fixes:
- Bug #1276: ipv6 defrag issue with routing headers
- Bug #1278: ssh banner parser issue
- Bug #1254: sig parsing crash on malformed rev keyword
- Bug #1267: issue with ipv6 logging
- Bug #1273: Lua – http.request_line not working
- Bug #1284: AF_PACKET IPS mode not logging drops and stream inline issue
For a full list of features, see the official site.
In this article I will show you how to install Suricata 2.0.4 on Ubuntu 14.10 Utopic Unicorn, Ubuntu 14.04 Trusty Tahr, Ubuntu 12.04 Precise Pangolin, Linux Mint 17 Qiana, Linux Mint 13 Maya, Pinguy OS 14.04, LXLE 14.04, Elementary OS 0.3 Freya, Elementary OS 0.2 Luna, Deepin 2014, Peppermint Five, LXLE 14.04, Linux Lite 2.0 and other Ubuntu derivative systems.
Because it is available via PPA, installing Suricata 2.0.4 on the listed Ubuntu 14.10, Ubuntu 14.04, Ubuntu 12.04 and derivative systems is easy. Follow the below instructions exactly, in order to get a successful installation.
Download and install the required library from Debian Sid:
For 32 bit systems:
$ wget http://ftp.de.debian.org/debian/pool/main/libh/libhtp/libhtp1_0.5.12-1_i386.deb
$ sudo dpkg -i libhtp1_0.5.12-1_i386.deb
For 64 bit systems:
$ wget http://ftp.de.debian.org/debian/pool/main/libh/libhtp/libhtp1_0.5.12-1_amd64.deb
$ sudo dpkg -i libhtp1_0.5.12-1_amd64.deb
Add the Suricata PPA and update the local repository index, on both 32 bit and 64 bit systems:
$ sudo add-apt-repository ppa:oisf/suricata-stable
$ sudo apt-get update
Install the suricata package, on both 32 bit and 64 bit systems:
$ sudo apt-get install suricata
Optional, to remove suricata, do:
$ sudo apt-get remove suricata libhtp1