[Autogenerated] It's time to go back into the lab and get
started with installing the extras package.
We're going to use this one to build and install it.
So let's hop in.
Alright.
And here we are back in the lab ready to start configuring
some of these Snort Plus plus extras.
Now, as we've talked about in this module already,
a lot of these extras are essentially plugins that we
can use to expand snorts capabilities.
They might be logging plugins they could be extra processors,
it could be any number of things that add to the snort system.
So let's go ahead and install the snort Plus Plus extras pack that
snore offers for users to download and experiment with and it comes
with some examples of ones we can use.
We're gonna highlight one in this module that has to do with the
application i D s and statistics around them.
But we'll also take a look at some of the other ones that are available to us.
So to install the Snort Plus Plus extras,
we have to first get into our Snort source folder.
This is where I built my snore installation on the box.
We're gonna use some of the materials in here to build the extras as well.
Now, while we're here,
we're gonna use w get to pull down the tar dot GZ
file for the snort three extras.
You can find it on GitHub in the snort three repository.
Alright.
And we're gonna pull this down, wait for it to pull and safe.
If we look here we have the snort three extra Tar dot GZ that we just created.
Now let's UNt target and then hop into it.
You may see a different version number if you just clone the Git
hub repository or pull the most current version.
This is a version that is a known good version for the
snort installation that I currently have.
So feel free to experiment with the different versions for the extras.
If you run into certain issues, that way,
you can make sure you have the maximum compatibility between
this package and your snort three installation.
Alright, now that we're in here,
one other thing that we have to do is define our package Config path.
So we're gonna just type in export package Config path equals.
And then the path.
Now in this installation it's gonna be under this directory right here.
The USr local lib package Config So we're gonna leave this
here and then now it's time to get ready to make and build
the installation for this.
Alright, now that we have the export done,
we're gonna make it, let's go ahead and hit configure.
See, make dot show.
And then we'll define our prefix as that and then we'll
hit enter and let it run through it.
See make shell script.
Right?
The build files are done.
So let's go ahead and get into their and we're gonna issue the
command make And so this took a couple of minutes.
But I fast forwarded the video for you.
So it was almost instantaneous.
and now we're done with the make.
So the next step is to do Sudo make install and there we go.
It is installed in this user local lib snort plugins directory.
Keep an eye on this as you're doing your installations because
understanding your snort path and where everything is installed is
necessary for when you're actually trying to run snort and use these plug
ins and extras in this particular installation.
This is where it is,
and this is going to have to be part of the snort command when
we're going to run snort for this purpose.
Now in the next demo,
we're going to take this a step further and actually see some of
the app IDE traffic in there and on top of that we'll go ahead
and collect some statistics and then view the other plugins that
have to do with this.
So stay with me.
We're gonna hop right into it.