install.sh

#!/bin/sh

echo "[+] Installing zeek ...\n"
sudo apt-get install cmake make gcc g++ flex bison libpcap-dev libssl-dev python3 python3-dev swig zlib1g-dev
sudo apt install -y --no-install-recommends \
    wget \
    ca-certificates \
    git \
    curl \
    gnupg
echo 'deb http://download.opensuse.org/repositories/security:/zeek/xUbuntu_20.04/ /' | sudo tee /etc/apt/sources.list.d/security:zeek.list
curl -fsSL https://download.opensuse.org/repositories/security:zeek/xUbuntu_20.04/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/security_zeek.gpg > /dev/null
sudo apt update
sudo apt install zeek


# create a symlink to zeek so that slips can find it
echo "[+] Executing 'ln -s /opt/zeek/bin/zeek /usr/local/bin/bro'\n"
sudo ln -s /opt/zeek/bin/zeek /usr/local/bin/bro
echo "[+] Executing 'export PATH=$PATH:/usr/local/zeek/bin'\n"
export PATH=$PATH:/usr/local/zeek/bin
echo "[+] Adding /usr/local/zeek/bin to ~/.bashrc\n"
echo "export PATH=$PATH:/usr/local/zeek/bin" >> ~/.bashrc


echo "[+] Installing Slips dependencies ...\n"
sudo apt install -y --no-install-recommends \
  python3 \
  redis-server \
  zeek \
  python3-pip \
  python3-certifi \
  python3-dev \
  build-essential \
  file \
  lsof \
  net-tools \
  iproute2 \
  iptables \
  python3-tzlocal \
  nfdump \
  tshark \
  git \
  whois \
  golang \
  notify-osd \
  yara \
  libnotify-bin


echo "[+] Executing 'python3 -m pip install --upgrade pip'\n"
python3 -m pip install --upgrade pip
echo "[+] Executing 'pip3 install -r requirements.txt'\n"
pip3 install -r requirements.txt
echo "[+] Executing pip3 install --ignore-installed six\n"
pip3 install --ignore-installed six

# For Kalipso
echo "[+] Downloading nodejs v19 and npm dependencies"
curl -fsSL https://deb.nodesource.com/setup_19.x | bash - && apt install -y --no-install-recommends nodejs
cd ./modules/kalipso && npm install
cd ../..

echo "[+] Installing p2p4slips\n"
# build the pigeon and Add pigeon to path
git submodule init && git submodule update && cd p2p4slips && go build && export PATH=$PATH:$(pwd) >> ~/.bashrc && cd ..


# running slips for the first time
echo "[+] Executing 'redis-server --daemonize yes'\n"
redis-server --daemonize yes