apt-get install autoconf automake1.9 autotools-dev libtool libcurl4-gnutls-dev libpcre3-dev libmagic-dev libadns1-dev libssh2-1-dev libssh-2-dev libpcap0.8-dev gcc-3.4 g++-3.4 byacc flex bison
svn checkout https://svn.carnivore.it/nepenthes/trunk/ nepenthes cd nepenthes
# you need to do this if you don't install flex or bison...didn't figure this out right away, no good reason # not to install flex or bison...shell code is important, so just install flex and bison... ;-) #rm -f modules/shellcode-signatures/signatures_parser.c #rm -f modules/shellcode-signatures/signatures_parser.h #rm -f modules/shellcode-signatures/signatures_scanner.h
autoreconf -v -i --force ./configure --enable-ssh --enable-debug-logging --enable-pcap --with-ssh-include=/usr/include/libssh/libssh.h CC=/usr/bin/gcc-3.4 CXX=/usr/bin/g++-3.4 make make install grpadd nepenthes useradd -g nepenthes nepenthes chown -R nepenthes:nepenthes /opt/nepenthes
Some config file changes in nepenthes.conf:
“logattack.so”, “log-attack.conf”, “” "shellcodesignatures.so", "", ""
Command to run:
/opt/nepenthes/bin/nepenthes --user=nepenthes --group=nepenthes -D
These are the packages needed to install on SuSe, in addition to / instead of the ones for Ubuntu…
libadns libadns-devel file-devel pcre-devel pcre curl curl-devel