UNIX PREPARATION INSTRUCTIONS FOR THE CYBER-TA (CTA) BotHunter Distribution Package Fedora/Debian/Suse Linux Self-Installation Release Free Internet Release www.cyber-ta.org July 26, 2007 SRI International Release Version: 0.9.3 1. LINUX CYBER-TA BOTHUNTER PREPARATION: The following instructions explain how to prepare a Linux host for installation of the Cyber-TA BotHunter Internet Distribution Package using BotHunter's self-installation program. This package is specifically designed for Fedora, Debian, or Suse Linux versions. Root Privilege is REQUIRED to perform these instructions. 2. SYSTEM AND ENVIRONMENT REQUIREMENTS: * Installation of this release does not require Internet connectivity. * Hardware requirements: Your target hardware platform should be an Intel Pentium system, have a minimum 1 GB RAM, minimum 1 NIC (for network monitoring purposes). * OS requirement: the automated root installation package requires Fedora, Suse, or Debian Linux. * Your target platform should have a promiscuous mode tap to some network traffic. Ideally, your machine will be attached to a monitoring position on an internal network egress point to observe connection flows between your internal hosts and external entities. 3 MACHINE PREPARATION INSTRUCTIONS: 3.A INSTALLATION OF DEPENDENT LIBRARIES If you are installing BotHunter on a system that is not connected to the Internet, you must first install libcpap and libpcre (must include install of "devel" headers) manually before proceeding to BotHunter installation. 3.B. INSTALLATION OF JAVA JRE To install BotHunter, you must be running Sun's JRE release 1.4.2 or newer. (Note that various gij/GNU Classpath distributions contain bugs that adversely impact our Bot Hunter release. Nevertheless, the installer will detect nonconformant versions and issue diagnostic warnings.) You can pull the latest JRE release from Sun from the following locations: http://java.sun.com/j2se/1.4.2/download.html Click to the latest J2SE JRE release for the appropriate OS release. To install this package, perform the following steps as root: Assuming you download the self-extracting JRE binary version 1.4.2_14 (or greater), you can perform the following steps: root% ./j2re1_4_2_14-linux-i586.bin (the script builds a JRE directory) root% mv j2re1.4.2_14 /usr/local 4. MACHINE PREPARATION INSTRUCTIONS: You are now ready to install the CTA BotHunter package. Please read file INSTALLATION.txt to proceed. good luck. Document revision: $Id: PREPARATION.txt,v 1.8 2007/07/26 19:46:53 skinner Exp $