Security Information Exchange (SIE) on CentOS 6 / RHEL 6

Introduction

EL6 systems should build the Farsight software distributions (nmsg,sie-nmsg, and wdns) from source after satisfying the build dependencies from the main EL6 and EPEL ("Extra Packages for Enterprise Linux") package repositories. The instructions below assume the x86_64 architecture is in use and that the user is running as root.

NOTE: The instructions below show the use of the GNU Stow utility to manage software installed into the /usr/local directory. This allows software to be easily installed into and uninstalled from the /usr/local directory hierarchy. See the Stow manual for details. GNU Stow is not required to install our software, but simplifies the management of the /usr/local directory.

NOTE: 64-bit Red Hat systems by default incorrectly set the library directory when building any software that uses autoconf. The instructions below always reset the library directory to the correct value by passing the parameter --libdir='${exec_prefix}/lib64' to the configure script. See Red Hat bug 772997 for details. The instructions below assume a 64-bit system.

NOTE: Red Hat systems fail to load shared libraries installed into /usr/local. See Red Hat bug 144967 for details. The setup instructions below fix this problem.

Setup

Configure the dynamic linker to load shared libraries installed into /usr/local. 
echo /usr/local/lib >> /etc/ld.so.conf.d/local.conf
echo /usr/local/lib64 >> /etc/ld.so.conf.d/local.conf
Install the "Development Tools" package group. 
yum groupinstall 'Development Tools'
Install the libpcap-devel and zlib-devel packages. 
yum install libpcap-devel zlib-devel
Enable the Extra Packages for Enterprise Linux package repository. 
rpm -Uvh http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm

Installing

Download the latest release of protobuf-c from https://github.com/protobuf-c/protobuf-c/releases. (NOTE: In the "Latest release" section, click the green protobuf-c-X.Y.Z.tar.gz download button, not the "Source code (zip)" or "Source code (tar.gz)" buttons.) Build and install it. 
./configure --prefix=/usr/local/stow/protobuf-c --libdir='${exec_prefix}/lib64' PKG_CONFIG_PATH=/usr/local/lib64/pkgconfig && make && make install && stow -v -d /usr/local/stow protobuf-c && ldconfig
Download the latest release of Farsight wdns from https://dl.farsightsecurity.com/dist/wdns/. Build and install it. 
./configure --prefix=/usr/local/stow/wdns --libdir='${exec_prefix}/lib64' PKG_CONFIG_PATH=/usr/local/lib64/pkgconfig && make && make install && stow -v -d /usr/local/stow wdns && ldconfig
Download the latest release of Farsight nmsg from https://dl.farsightsecurity.com/dist/nmsg. Build and install it. 
./configure --prefix=/usr/local/stow/nmsg --without-libxs --sysconfdir=/etc --with-plugindir=/usr/local/lib64/nmsg --libdir='${exec_prefix}/lib64' PKG_CONFIG_PATH=/usr/local/lib64/pkgconfig && make && make install && stow -v -d /usr/local/stow nmsg && ldconfig
Download the latest release of Farsight sie-nmsg from https://dl.farsightsecurity.com/dist/sie-nmsg. Build and install it. 
./configure --prefix=/usr/local/stow/sie-nmsg --libdir='${exec_prefix}/lib64' PKG_CONFIG_PATH=/usr/local/lib64/pkgconfig && make && make install && stow -v -d /usr/local/stow sie-nmsg
If SRA or AXA is going to be utilized, download the latest release of Farsight axa from https://dl.farsightsecurity.com/dist/axa. Build and install it. 
./configure --prefix=/usr/local/stow/axa --libdir='${exec_prefix}/lib64' PKG_CONFIG_PATH=/usr/local/lib64/pkgconfig && make && make install && stow -v -d /usr/local/stow axa

Uninstalling

Run the following commands to use GNU Stow to uninstall Farsight nmsg, sie-nmsg, wdns and axa from /usr/local. 
stow -v -d /usr/local/axa -D wdns
rm -rf /usr/local/stow/axa

stow -v -d /usr/local/stow -D sie-nmsg
rm -rf /usr/local/stow/sie-nmsg

stow -v -d /usr/local/stow -D nmsg
rm -rf /usr/local/stow/nmsg

stow -v -d /usr/local/stow -D wdns
rm -rf /usr/local/stow/wdns

Want to learn more?

Protect against cybercriminal activity in real-time.

Request a free demo