|
|
|
@ -7,10 +7,9 @@ the basics. For more details, read through the more specific chapters.
|
|
|
|
Installation
|
|
|
|
Installation
|
|
|
|
------------
|
|
|
|
------------
|
|
|
|
|
|
|
|
|
|
|
|
It's assumed that you run a recent Ubuntu release as the official PPA can be
|
|
|
|
It's assumed that you run a recent Ubuntu release as the official PPA can then
|
|
|
|
used for the installation.
|
|
|
|
be used for the installation. To install the latest stable Suricata version, follow
|
|
|
|
|
|
|
|
the steps::
|
|
|
|
Installation steps::
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
sudo add-apt-repository ppa:oisf/suricata-stable
|
|
|
|
sudo add-apt-repository ppa:oisf/suricata-stable
|
|
|
|
sudo apt update
|
|
|
|
sudo apt update
|
|
|
|
@ -18,13 +17,14 @@ Installation steps::
|
|
|
|
|
|
|
|
|
|
|
|
The dedicated PPA repository is added, and after updating the index, Suricata can
|
|
|
|
The dedicated PPA repository is added, and after updating the index, Suricata can
|
|
|
|
be installed. We recommend installing the ``jq`` tool at this time as it will help
|
|
|
|
be installed. We recommend installing the ``jq`` tool at this time as it will help
|
|
|
|
with displaying information from Suricata's EVE JSON output (described later in this guide).
|
|
|
|
with displaying information from Suricata's EVE JSON output (described later in
|
|
|
|
|
|
|
|
this guide).
|
|
|
|
|
|
|
|
|
|
|
|
For the installation on other systems or to use specific compile options see
|
|
|
|
For the installation on other systems or to use specific compile options see
|
|
|
|
:ref:`installation`.
|
|
|
|
:ref:`installation`.
|
|
|
|
|
|
|
|
|
|
|
|
After installing Suricata, you can check what version of Suricata you have
|
|
|
|
After installing Suricata, you can check which version of Suricata you have
|
|
|
|
running and with what options as well as the service state::
|
|
|
|
running and with what options, as well as the service state::
|
|
|
|
|
|
|
|
|
|
|
|
sudo suricata --build-info
|
|
|
|
sudo suricata --build-info
|
|
|
|
sudo systemctl status suricata
|
|
|
|
sudo systemctl status suricata
|
|
|
|
|