Snorter: Install Snort + Barnyard2 + PulledPork, the easy way!

1. Snorter
InstallGuide
Install Snort + Barnyard2 + PulledPork automatically
@joan_bono

2. What doyou need?
A computer running:
Debian
KaliLinux
RaspbianJessie
Oinkcode:
It's FREE!
Highly recommended!
Get yours here.
IdentifiedNetworkInterface:
ip link show
Previous dependencies:
sudo apt-get install git
Patience.

3. First steps
Cloningtherepository:
git clone https://github.com/joanbono/Snorter.git`
cd Snorter/src
bash Snorter.sh -h
Recommended: Executetheprogramusinganoinkcode
bash Snorter.sh -o <oinkcode> -i <interface>
Ex: bash Snorter.sh -o XXXXXXXXXXXXX -i eth0
Not Recommended: Executetheprogramwithout anoinkcode
bash Snorter.sh -i interface
bash Snorter.sh -i eth0

4. Snort installation
Superuser password, andwait...

5. Snort and daq areinstalled.

6. Now it's timetoaddthe HOME_NET andthe EXTERNAL_NET .
Press Enter tocontinue. It willopen vim :
Press A togototheendoftheline.
Addtheaddress andthemaskyou want toprotect.
Press Esc andthen :wq! tosavethechanges.

7. Dothesamefor the EXTERNAL_NET :
Press Enter tocontinue. It willopen vim :
Press A togototheendoftheline.
Addtheattacker address. Recommeded: !$HOME_NET .
Press Esc andthen :wq! tosavethechanges.

8. Now theoutput. By default, unified2 output is enabled, but
you canenablemorethanoneoutput. I'mgoingtoenableboth
CSV andTCPdump output.

9. Now SNORT willstart in console mode. Senda PING from
another machine.
It willshow a PING alert. Press Ctrl+C once, andcontinuethe
installation.

10. Barnyard2 installation
Now it's timetoinstall BARNYARD2 ifyou want.
You willbeaskedtoinsert apasswordfor the SNORT database
whichis goingtobecreated. Intheexample, I'veused
SNORTSQL

11. Now theprogramwillinstalldependencies.
It's goingtoinstall MySQL , soifit's not installed, you willinsert a
passwordfor this servicetoo. Intheexample, I'veused
ROOTSQL .

12. Andthe MySQL password.

13. Now you aregoingtobeaskedfor the MySQL password3 times
Pleasekeep inmind: MySQL root password3 times.

14. PulledPork installation
Now it's timetoinstall PulledPork ifyou want.

15. EmergingThreats ruleset
Doyou want toaddtheEmergingThreats rules andthe
community ones (enabledby default)?
Remember toedit your /etc/snort/snort.conf andremove
the # toenabletherules you want or theones you need.

16. service creation
Createasystem service :

17. Downloadandinstallnew rules
You candownloadrules wheneverythingis installedand
configurated.

18. Reboot
Reboot thesystem.

19. Enjoy!
Please, feelfreetoopenissues ifyou haveany problemwiththe
program.