- updated ssdeep instructions

pull/3232/head
Steve Clement 2018-05-07 13:11:16 +09:00
parent 3c7be3b588
commit 85d12f7dc1
2 changed files with 28 additions and 4 deletions

View File

@ -328,10 +328,10 @@ ssdeep -h # test
#installing ssdeep_php
sudo pecl install ssdeep
# 7.0 if your PHP 7.0 and you know what to do if you have a different version
sudo echo "extension=ssdeep.so" > /etc/php/7.0/mods-available/ssdeep.ini
# You should add "extension=ssdeep.so" to mods-available - Check /etc/php for your current version
echo "extension=ssdeep.so" | sudo tee /etc/php/7.2/mods-available/ssdeep.ini
sudo phpenmod ssdeep
service apache2 restart
sudo service apache2 restart
Optional features: misp-modules
-------------------------------

View File

@ -262,8 +262,32 @@ Recommended actions
Optional features
-------------------
-----------------
# MISP has a new pub/sub feature, using ZeroMQ. To enable it, simply run the following command
sudo pip install pyzmq
# ZeroMQ depends on the Python client for Redis
sudo pip install redis
# For the experimental ssdeep correlations, run the following installation:
# installing ssdeep
wget http://downloads.sourceforge.net/project/ssdeep/ssdeep-2.13/ssdeep-2.13.tar.gz
tar zxvf ssdeep-2.13.tar.gz
cd ssdeep-2.13
./configure
make
sudo make install
ssdeep -h # test
#installing ssdeep_php
sudo pecl install ssdeep
# You should add "extension=ssdeep.so" to mods-available - Check /etc/php for your current version
echo "extension=ssdeep.so" | sudo tee /etc/php/7.2/mods-available/ssdeep.ini
sudo phpenmod ssdeep
sudo service apache2 restart
Optional features: misp-modules
-------------------------------
# If you want to add the misp modules functionality, follow the setup procedure described in misp-modules:
# https://github.com/MISP/misp-modules#how-to-install-and-start-misp-modules
# Then the enrichment, export and import modules can be enabled in MISP via the settings.