Installing Suricata 5.0.0 from source on CentOS 8

Following insturctions will get you a fully working Suricata 5.0.0 by installing from the source. These steps are aimed at setting up Suricata 5.0.0 quickly for a test environment and isn’t recommended for a production server.

Installing pre-requisite

$ sudo dnf config-manager --set-enabled PowerTools
$ sudo dnf -y install gcc libpcap-devel pcre-devel libyaml-devel file-devel zlib-devel jansson-devel nss-devel libcap-ng-devel libnet-devel tar make libnetfilter_queue-devel lua-devel python3-PyYAML libmaxminddb-devel rustc cargo lz4-devel

Download & Unpack Suricata 5.0.0

$ wget https://www.openinfosecfoundation.org/download/suricata-5.0.0.tar.gz
$ tar xzvf suricata-5.0.0.tar.gz
$ cd suricata-5.0.0/

Compile & Install Suricata 5.0.0

$ ./configure --libdir=/usr/lib64 --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-nfqueue --enable-lua
$ sudo make install-full

Verify Suricata Installation

$ suricata -V
This is Suricata version 5.0.0 RELEASE

Walkthrough


6 comments

  1. Excellent post thanks. At the end an error was shown and not make the install at all, use suricata 5.0.3 from https://www.openinfosecfoundation.org/download/suricata-5.0.3.tar.gz, but is the same with suricata-5.0.0.tar.gz… look like this…

    make[1]: Leaving directory ‘/tmp/suricata-5.0.3’
    make install-rules
    make[1]: Entering directory ‘/tmp/suricata-5.0.3’
    error: rules not installed as suricata-update not available
    make[1]: *** [Makefile:937: install-rules] Error 1
    make[1]: Leaving directory ‘/tmp/suricata-5.0.3’
    make: *** [Makefile:918: install-full] Error 2

    Any clue or recommendation..? Thanks in advance, your help is highly appreciated-

    Like


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.