How to Install and Uninstall sagan Package on Ubuntu 21.10 (Impish Indri)

Last updated: December 24,2024

1. Install "sagan" package

This guide let you learn how to install sagan on Ubuntu 21.10 (Impish Indri)


    
        
            $
        

        
            
                sudo apt update
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo apt install
            
                        
                sagan
            
                    
    
    Copied

2. Uninstall "sagan" package

Please follow the guidelines below to uninstall sagan on Ubuntu 21.10 (Impish Indri):


    
        
            $
        

        
            
                sudo apt remove
            
                        
                sagan
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo apt autoclean && sudo apt autoremove
            
                    
    
    Copied

3. Information about the sagan package on Ubuntu 21.10 (Impish Indri)

Package: sagan
Architecture: amd64
Version: 1.2.0-1.2
Priority: extra
Section: universe/admin
Origin: Ubuntu
Maintainer: Ubuntu Developers
Original-Maintainer: Pierre Chifflier
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 589
Depends: libc6 (>= 2.32), libfastjson4 (>= 0.99.3), liblognorm5 (>= 0.3.0), libpcre3, libyaml-0-2, adduser, sagan-rules, lsb-base (>= 3.0-6)
Filename: pool/universe/s/sagan/sagan_1.2.0-1.2_amd64.deb
Size: 109652
MD5sum: 5f304ef5124e4610b04f1ef3f798a87c
SHA1: 6b898305e591f24896ac484e9f83301db8a01b2d
SHA256: 46f8ed180326188c12f5f9d47a565fc5980517bd49c6274442c84fd982e35a5f
SHA512: 981518cd653053c4b4114b43fc0fa0642c114b062cf268012ad8dc97f17f90678e993c47186eb4215b4df0b715c3e73c8035fdb81fa59d57b2cd3da40f301bcc
Homepage: http://sagan.softwink.com/
Description-en: Real-time System & Event Log Monitoring System
Sagan is a multi-threaded, real time system- and event-log monitoring
system, but with a twist. Sagan uses a “Snort” like rule set for
detecting malicious events happening on your network and/or computer
systems.
If Sagan detects a potentially bad event, that event can be stored to a
Snort database (MySQL/PostgreSQL), send it to a SIEM tool like Prelude,
or send an email.
Sagan is meant to be used in a ‘centralized’ logging environment, but
will work fine as part of a standalone Host IDS system for workstations.
Description-md5: a4c1e727e9a1b94baaa2f0b7b56f44ad