Suricata Installation For Intrusion Detection System For Linux Networks

Code:

sudo apt install -y software-properties-common
sudo add-apt-repository ppa:oisf/suricata-stable
sudo apt update -y
sudo apt install -y suricata gedit


To edit config

Code:

sudo gedit etc/suricata/suricata.yaml

make sure your home network ip is correct!

now update and apply rules

Code:

sudo suricata-update list-sources

example to add and set active a rule

Code:

sudo suricata-update enable-source et/open

Now to turn on

Code:

sudo systemctl enable suricata

Code:

sudo systemctl start suricata