Installing Snare

Owned by Svetlana Sheptiy
Last updated: Oct 13, 2022

To install the Snare for Linux binary RPM package:

  1. Download the required RPM.

  2. Logon as root user, i.e. at the command prompt enter the command /bin/su and enter the root password when prompted. Issue the command, as root as per your distribution:
    # rpm -Uvh filename.rpm

    For example,  
    # rpm -Uvh Snare-RHEL-8-Agent-v5.6.1-1-x64.rpm

    Note: for version < 5.6.1 the file name is snarelinux-supp-{Version}-1-{Platform}.x86_64.rpm
    # rpm -Uvh snarelinux-supp-v5.1.0-1-RHEL-8.x86_64.rpm

  3. This will install Snare for Linux and restart the audit daemon (auditd)


To install the Snare for Linux binary DEB package:

  1. Download the required DEB.

  2. Logon as root user, i.e. at the command prompt enter the command /bin/su and enter the root password when prompted. Issue the command, as root as per your distribution:
    > dpkg -i filename.deb

    For example,
    > dpkg -i Snare-Ubuntu-20-Agent-v5.6.1-1-x64.deb

    Note: for version < 5.6.1 the file name is snarelinux-supp-{Version}-1-{Platform}.x86_64.deb

    > dpkg -i snarelinux-supp-5.1.0-1-Ubuntu-16.x86_64.deb


  3. This will install Snare for Linux and restart the audit daemon (auditd).

Note: Readme and default snare.conf will be created in /usr/share/doc/Snare-Ubuntu-*