Raza Ahmad edited this page Jul 25, 2018 · 17 revisions

This page lists the requirements for setting up SPADE on various operating systems. In all cases, the Oracle Java Development Kit (JDK 8) is required to compile SPADE. This can be downloaded from Oracle. Installation instructions for different platforms are given below.



On Ubuntu 14 and onwards, the JDK can be installed with:

sudo add-apt-repository ppa:webupd8team/java
sudo apt-get update
sudo apt-get install oracle-java8-installer

In addition to the JDK, building SPADE requires that you have Git installed on your system. It is used to download the source files for compilation. You will also need Linux Audit, FUSE, lsof, and uthash. On Ubuntu, all of these can be installed via the following command:

sudo apt-get install auditd fuse git libaudit-dev libfuse-dev linux-headers-`uname -r` lsof pkg-config uthash-dev


For Fedora 28, use the following commands to install JDK:

wget --no-cookies --no-check-certificate --header "Cookie:; oraclelicense=accept-securebackup-cookie" ""
sudo dnf install jdk-8u181-linux-x64.rpm

Other dependencies can be installed as following:

sudo dnf install audit fuse-devel fuse-libs git iptables kernel-devel-`uname -r` lsof uthash-devel

Mac OS X

If you are using Mac OS X, you will need Git to retrieve the SPADE source files.

Fuse4X is required, unless you already have MacFUSE installed.

Using MacPorts, you can install the required packages with the following command:

sudo port install git fuse4x pkgconfig

Alternatively, you can use Brew to install the required package with:

brew install git pkgconfig Caskroom/cask/osxfuse


On Windows, SPADE can be installed using Cygwin. Detailed instructions on setting up Cygwin can be found on its homepage. The following Cygwin packages are required:

  • gcc (under the Devel category)
  • gcc-core (under the Devel category)
  • make (under the Devel category)
  • git (under the Devel category)

To use the ProcMon reporter for Windows, you will need to download and install Process Monitor.

Clone this wiki locally
You can’t perform that action at this time.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.
Press h to open a hovercard with more details.