How to Install and Uninstall sagan Package on Ubuntu 20.10 (Groovy Gorilla)

Last updated: May 21,2024

1. Install "sagan" package

Here is a brief guide to show you how to install sagan on Ubuntu 20.10 (Groovy Gorilla)


    
        
            $
        

        
            
                sudo apt update
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo apt install
            
                        
                sagan
            
                    
    
    Copied

2. Uninstall "sagan" package

This tutorial shows how to uninstall sagan on Ubuntu 20.10 (Groovy Gorilla):


    
        
            $
        

        
            
                sudo apt remove
            
                        
                sagan
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo apt autoclean && sudo apt autoremove
            
                    
    
    Copied

3. Information about the sagan package on Ubuntu 20.10 (Groovy Gorilla)

Package: sagan
Architecture: amd64
Version: 1.2.0-1.1
Priority: extra
Section: universe/admin
Origin: Ubuntu
Maintainer: Ubuntu Developers
Original-Maintainer: Pierre Chifflier
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 597
Depends: libc6 (>= 2.14), libfastjson4 (>= 0.99.3), liblognorm5 (>= 0.3.0), libpcre3, libyaml-0-2, adduser, sagan-rules, lsb-base (>= 3.0-6)
Filename: pool/universe/s/sagan/sagan_1.2.0-1.1_amd64.deb
Size: 111276
MD5sum: a733d3ff748a9a71df56e44510529a82
SHA1: ea5f8f5ee3c123472b1fca8425fa1c0959fe0af5
SHA256: f85a5dedd27847ccad3a54ab2fe883e14c4e1afca123371704ae780f567ee01c
SHA512: aa1055cffbffa5bd664ff6d6a069bafa6f95cc9c85f4549a0843d5ce670dc94052c9a073deb7d75b841751fe35449af9fd3bc254401e32e7f0aef2f15f753f75
Homepage: http://sagan.softwink.com/
Description-en: Real-time System & Event Log Monitoring System
Sagan is a multi-threaded, real time system- and event-log monitoring
system, but with a twist. Sagan uses a “Snort” like rule set for
detecting malicious events happening on your network and/or computer
systems.
If Sagan detects a potentially bad event, that event can be stored to a
Snort database (MySQL/PostgreSQL), send it to a SIEM tool like Prelude,
or send an email.
Sagan is meant to be used in a ‘centralized’ logging environment, but
will work fine as part of a standalone Host IDS system for workstations.
Description-md5: a4c1e727e9a1b94baaa2f0b7b56f44ad