# CommunityID Install

**URL:** <https://community.zeek.org/t/communityid-install/6292>\
**Category:** Zeek\
**Created:** [January 19, 2021, 3:29pm UTC](https://community.zeek.org/t/communityid-install/6292 "2021-01-19T15:29:05Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![David\_Decker](https://avatars.discourse-cdn.com/v4/letter/d/a88e4f/32.png) [@David\_Decker](https://community.zeek.org/u/David_Decker)\
**Post date:** [January 19, 2021, 3:29pm UTC](https://community.zeek.org/t/communityid-install/6292/1 "2021-01-19T15:29:05Z")

</div>

Looking for assistance in getting CommunityID installed. I am using SecurityOnion 16.04, due to EOL on that system not much details are available. I wanted to see if anyone has been able to get it up and running.

Looks like SO does not have the Package manager installed (Is it possible to install a plugin without having to install the package manager)?

Thanks

---

<div class="post-metadata">

**Author:** ![Christian](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/christian/32/593_2.png) [@Christian](https://community.zeek.org/u/Christian)\
**Post date:** [January 19, 2021, 7:48pm UTC](https://community.zeek.org/t/communityid-install/6292/2 "2021-01-19T19:48:42Z")

</div>

Hi David,

> Looking for assistance in getting CommunityID installed. I am using  
> SecurityOnion 16.04, due to EOL on that system not much details are  
> available. I wanted to see if anyone has been able to get it up and  
> running.
> 
> Looks like SO does not have the Package manager installed (Is it possible  
> to install a plugin without having to install the package manager)?

If upgrading is an option for you, then consider SO 2, which supports Community ID out of the box in Zeek and Suricata:

[https://docs.securityonion.net/en/2.3/community-id.html](https://docs.securityonion.net/en/2.3/community-id.html)

If installing via zkg is not an option, you can try to do it manually, but it'll be a bit fiddly. You can generally build plugins separately (take a look at the build\_command entry in zkg.meta for the entrypoint), but Zeek packages usually ship with additional scripting around the plugins. That's true for Community ID as well -- the plugin alone just gives you a BiF for the hash computation, but doesn't add the ID string to conn.log.

So, in a nutshell, it's probably possible, but depends on a lot of details, and will be pretty low-level.

Hope this helps,  
Christian

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:47pm UTC](https://community.zeek.org/t/communityid-install/6292/3 "2022-05-06T15:47:34Z")

</div>