CentOS7 安装 SURICATA 5.0.3 安装步骤

1、

yum install epel-release

2、

sudo yum -y install gcc libpcap-devel pcre-devel libyaml-devel file-devel \
  zlib-devel jansson-devel nss-devel libcap-ng-devel libnet-devel tar make \
  libnetfilter_queue-devel lua-devel PyYAML libmaxminddb-devel rustc cargo \
  lz4-devel

3、

wget https://www.openinfosecfoundation.org/download/suricata-5.0.3.tar.gz

4、

tar -xvzf suricata-5.0.3.tar.gz
cd suricata-5.0.3
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-nfqueue --enable-lua --enable-geoip 
make
make install
ldconfig
make install-full

5、

//GOIP2 install
yum -y install geoipupdate

6、

到https://dev.maxmind.com/geoip/geoipupdate注册帐号，申请LicenseKey,填入/etc/GeoIP.conf中
//GeoIP.conf file - used by geoipupdate program to update databases
//from http://www.maxmind.com
AccountID YOUR_ACCOUNT_ID_HERE
LicenseKey YOUR_LICENSE_KEY_HERE
EditionIDs YOUR_EDITION_IDS_HERE

7、

suricata -D -c /etc/suricata/suricata.yaml -i em4 --init-errors-fatal