Installation about vectorscan HOT 4 CLOSED

Hi @Z3dKay. Vectorscan is meant to be a drop-in replacement for hyperscan. It is already packaged for Debian, but it's not yet migrated to testing: https://tracker.debian.org/pkg/vectorscan

You could just grab the debian packages and install on your arm64 system with no problems. I hope I helped.

from vectorscan.

So only the last 2 instructions apply to me?

I'm essentially trying to install Snort 3 on the Raspberry Pi but I'm stuck with hyperscan as I wasn't aware of the incompatibility issues with ARM.
With hyperscan the build command I found was:
cmake -DCMAKE_INSTALL_PREFIX=/usr/local -DBOOST_ROOT=~/snort_src/boost_1_80_0/ ../hyperscan-5.4.0

can I replace hyperscan-5.4.0 with vectorscan-5.48 or do I use the commands from README?

from vectorscan.

it's in the plans to send bug reports to Debian snort packages to allow enabling vectorscan on Arm instead of hyperscan.
If you want to build from source on the Pi, there is no cross-compiling involved -and the instructions are old incorrect unfortulately, apologies for that. So to build ON the Pi you only have to do the following:

(inside vectorscan directory)

mkdir build
cd build
cmake -DCMAKE_BUILD_TYPE=Release ..
make -jT
make install

That should install the same libraries as hyperscan and they will be detected by snort.

from vectorscan.

Thank you so much for the help, much appreciated. That is all for now, onto installing snort 3. Will see if it works.

from vectorscan.