Suricata Installation

Installation

• sudo apt update
• sudo apt -y install suricata
• suricata -V

This is Suricata version 6.0.1 RELEASE

Install Rules

• wget http://rules.emergingthreats.net/open/suricata/emerging.rules.tar.gz
• tar zxvf emerging.rules.tar.gz
• cd rules
• cat *.rules > /etc/suricata/rules/suricata.rules

Suricata config

add to /etc/suricata/suricata.yaml

rule-files:

 - suricata.rules
 - local.rules