Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/mikehorn-git/docker-snort3
Unofficial Snort3 IDS/IPS Docker image.
https://github.com/mikehorn-git/docker-snort3
docker ids ips snort snort3
Last synced: about 11 hours ago
JSON representation
Unofficial Snort3 IDS/IPS Docker image.
- Host: GitHub
- URL: https://github.com/mikehorn-git/docker-snort3
- Owner: MikeHorn-git
- License: mit
- Created: 2024-03-17T11:40:47.000Z (8 months ago)
- Default Branch: main
- Last Pushed: 2024-05-19T14:13:07.000Z (6 months ago)
- Last Synced: 2024-05-19T14:50:54.739Z (6 months ago)
- Topics: docker, ids, ips, snort, snort3
- Language: Dockerfile
- Homepage: https://hub.docker.com/r/mikehorn/snort3
- Size: 26.4 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Docker Snort3
# Description
Unofficial [snort3](https://www.snort.org/snort3) IDS/IPS software docker image.
# Information
* From : Debian Bookworm Slim
* Size : 756 MB
* Time : Build from source. Take multiples minutes depending on your system
* Snort Version : 3.3.7.0
* Libdaq Version : 3.0.16
* Trivy : 0 unfixed vulnerabilities.
# Installation
## Docker Hub
```bash
docker pull mikehorn/snort3:latest
```
## Build Yourself
```bash
git clone https://github.com/MikeHorn-git/docker-snort3.git
cd docker-snort3/
docker compose build
```
# Usage
To use file from your host :
* Create a directory in your home with the name snort
* Modify the docker-compose.yml, to replace the $USER var to your username in the volumes section
* Place the files you want in host : /home/$USER/snort
* In the docker container they are available at /files
## Example 1
```bash
docker compose run --rm snort3 -i eth0
```
## Example 2
```bash
docker compose run --rm snort3 -r /files/file.pcap
```
# Security
* Lint with [hadolint](https://github.com/hadolint/hadolint)
* Scan with [trivy](https://github.com/aquasecurity/trivy)
# To-Do
- [ ] Create and configure snort.conf file.
- [x] Add docker-compose.yml file.
- [x] Push image to Docker Hub.