Installing Snort on Linux :
First download Snort’s latest version “snort-22.214.171.124.tar.gz” using the following command :
wget http://www.snort.org/dl/snort-current/snort-126.96.36.199.tar.gz -O snort-188.8.131.52.tar.gz
Run the following commands to proceed with installation:
tar zxf snort-184.108.40.206.tar.gz
While installing Snort you may get following error:
ERROR! Libpcap library/headers (libpcap.a (or .so)/pcap.h) not found
To fix the above error you need to install the following libpcap, libpcap-devel modules:
yum install libpcap libpcap-devel
Once the above modules are installed, please re-run the snort installation process.
It will successfully Install Snort in Server.
Once the installation is complete, you need to copy the configuration files <snort-220.127.116.11>/etc/snort.conf to /etc/snort/snort.conf in your server. Alter the configuration as per your requirements.
The default rules for Snort can be found here . You can download the rules and add them to the /etc/snort/rules folder in server.