Install Snort via Yum

athomas · 05-17-2010, 07:22 AM

I'm on CentOS 5.5 on one of my servers, and I'm trying to install Snort via yum. 'yum install snort' doesn't work, doesn't find anything. Do I need to add a repository or something?

unSpawn · 05-17-2010, 11:58 AM

Should be in the RPMForge or EPEL repo. Might be in other repos but these are marked as the most stable ones.

athomas · 05-17-2010, 12:00 PM

Those are with CentOS by default. No luck.

unSpawn · 05-17-2010, 12:14 PM

Quote:

Originally Posted by athomas

Those are with CentOS by default.

No they most definitely are not ('find /etc/yum.repos.d/ -type f | xargs -iX rpm --qf="%{NAME}: %{VENDOR}\n" -qf 'X';').

Quote:

Originally Posted by athomas

No luck.

Code:

]# yum --enablerepo=epel search snort
snort.i386 : An open source Network Intrusion Detection System (NIDS)

So it's in EPEL.

athomas · 05-17-2010, 12:17 PM

I get this:

Code:

Error getting repository data for epel, repository not found

athomas · 05-17-2010, 12:23 PM

Installed EPEL, snort is still not found.

Code:

root@bfhserver04 [~]# wget http://download.fedora.redhat.com/pub/epel/5/i386/epel-release-5-3.noarch.rpm
--2010-05-17 13:20:16--  http://download.fedora.redhat.com/pub/epel/5/i386/epel-release-5-3.noarch.rpm
Resolving download.fedora.redhat.com... 209.132.183.67
Connecting to download.fedora.redhat.com|209.132.183.67|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11989 (12K) [application/x-rpm]
Saving to: `epel-release-5-3.noarch.rpm'

100%[======================================>] 11,989      --.-K/s   in 0.1s    

2010-05-17 13:20:16 (121 KB/s) - `epel-release-5-3.noarch.rpm' saved [11989/11989]

root@bfhserver04 [~]# rpm -Uvh epel-release-5-3.noarch.rpm 
warning: epel-release-5-3.noarch.rpm: Header V3 DSA signature: NOKEY, key ID 217521f6
Preparing...                ########################################### [100%]
   1:epel-release           ########################################### [100%]
root@bfhserver04 [~]# yum install snort
Loaded plugins: fastestmirror, priorities
Loading mirror speeds from cached hostfile
 * addons: yum.singlehop.com
 * base: mirror.team-cymru.org
 * contrib: dist1.800hosting.com
 * epel: mirrors.tummy.com
 * extras: yum.singlehop.com
 * rpmforge: ftp-stud.fht-esslingen.de
 * updates: mirror.raystedman.net
epel                                                     | 3.4 kB     00:00     
epel/primary_db                                          | 2.6 MB     00:00     
Excluding Packages in global exclude list
Finished
Setting up Install Process
No package snort available.
Nothing to do
root@bfhserver04 [~]#

unSpawn · 05-17-2010, 04:56 PM

Uh. My mistake. Check out the Atomic Rocket Turtle (ART) repo (but always check out http://wiki.centos.org/AdditionalResources/Repositories first!) or D/L snort-2.8.6-1.RH5.i386.rpm (current for 2010/05/17) from the Snort website.