You're reading from IDS and IPS with Snort 3 Get up and running with Snort 3 and discover effective solutions to your security issues

Product type Paperback

Published in Sep 2024

Publisher Packt

ISBN-13 9781800566163

Length 256 pages

Edition 1st Edition

Tools

Snort

Concepts

Network Security

Author (1):

Ashley Thomas

View More author details

Table of Contents (23) Chapters

Preface

1. Part 1: The Background

2. Chapter 1: Introduction to Intrusion Detection and Prevention FREE CHAPTER

3. Chapter 2: The History and Evolution of Snort

4. Part 2: Snort 3 – The New Horizon

5. Chapter 3: Snort 3 – System Architecture and Functionality

6. Chapter 4: Installing Snort 3

7. Chapter 5: Configuring Snort 3

8. Part 3: Snort 3 Packet Analysis

9. Chapter 6: Data Acquisition

10. Chapter 7: Packet Decoding

11. Chapter 8: Inspectors

12. Chapter 9: Stream Inspectors

13. Chapter 10: HTTP Inspector

14. Chapter 11: DCE/RPC Inspectors

15. Chapter 12: IP Reputation

16. Part 4: Rules and Alerting

17. Chapter 13: Rules

18. Chapter 14: Alert Subsystem

19. Chapter 15: OpenAppID

20. Chapter 16: Miscellaneous Topics on Snort 3

21. Index

Why subscribe?

22. Other Books You May Enjoy

Installing Snort 3 on CentOS

This section will describe the steps involved in following the installation process we described in the earlier section on the CentOS system. The default package manager on CentOS is yum, which is being replaced by its successor, dnf. dnf is backward compatible with yum. For our purposes, we used dnf.

Preparing the system

We installed CentOS 7 using the ISO package from the CentOS public repository: https://buildlogs.centos.org/centos/7/isos/x86_64/.

After installation, we installed epel-release on the CentOS system. epel-release stands for Extra Packages for Enterprise Linux (EPEL) release. EPEL is a software repository that has a wide range of applications that CentOS can use. This will help us prepare the system such that all the required packages and other dependencies for Snort can be installed.

The commands to install the epel-release package and upgrade the system to the latest version is as follows: