Intrusion Detection and Prevention

Using Rulesets in Suricata IPS

Started by dcol

Pages1 2

Replies: 27
Views: 97,184

March 06, 2025, 07:00:50 PM
by Deathmage85

Performance tuning for IPS maximum performance

Started by dcol

Pages1 2 3 ... 8

Replies: 105
Views: 233,764

March 09, 2024, 10:57:59 PM
by MagikMark

Suricata is crashing on all firerwalls starting April 19th, 2025

Started by geotek

Replies: 6
Views: 544

April 30, 2025, 01:49:53 PM
by VG Gerolstein

os-etpro-telemetry log error

Started by SarpeTronic

Replies: 0
Views: 83

April 24, 2025, 11:40:06 AM
by SarpeTronic

Surricata IDS/IPS rule to CSV

Started by MartinCCSS

Replies: 1
Views: 88

April 24, 2025, 09:49:50 AM
by AishaHarvey

Matching traffic for both in and out interface

Started by unlikely

Replies: 3
Views: 170

April 23, 2025, 02:00:12 AM
by Patrick M. Hausen

Just ran out of space in queue - Suricata Crash

Started by Georges

Replies: 11
Views: 4,927

April 21, 2025, 02:48:17 PM
by allenlook

opening devname netmap:igb8-2/R failed: Cannot allocate memory

Started by crit

Replies: 0
Views: 102

April 16, 2025, 12:32:53 PM
by crit

Exclude/bypass device from suricata in IPS mode not working

Started by opnblue

Replies: 2
Views: 259

April 11, 2025, 01:40:44 PM
by ahro_john

os-wazuh-agent does not update alias when active-response plugin is called

Started by Haddock27

Replies: 1
Views: 209

March 30, 2025, 05:03:29 PM
by Othvez

IDS or CrowdSec Still necessary?

Started by stanps

Replies: 6
Views: 472

March 26, 2025, 06:34:49 PM
by michmoor

Empty rules with ET Pro Telemetry

Started by RayonRa

Replies: 9
Views: 587

March 20, 2025, 08:51:44 PM
by RayonRa

Policy doesnt seem to be working

Started by Meg

Replies: 1
Views: 161

March 18, 2025, 12:35:58 AM
by Meg

Is there a way to monitor IDS IPS stats in the GUI ? (redirect)

Started by alex_62450

Replies: 2
Views: 266

March 17, 2025, 12:32:46 PM
by alex_62450

Suricata IPS Unblocking a blocked Ip address

Started by Meg

Replies: 2
Views: 293

March 16, 2025, 06:08:27 PM
by Meg

Detect and block TCP Copy, possible?

Started by pwb

Replies: 1
Views: 187

March 11, 2025, 04:20:18 PM
by meyergru

Duplicate/invalid rules

Started by planetf1

Replies: 11
Views: 2,846

March 10, 2025, 08:42:21 AM
by Trannie

Error when the script send_telemetry.py run

Started by Glow

Replies: 5
Views: 2,703

March 08, 2025, 10:13:59 AM
by AdrainJohnston

Suricata alerts view set to 5000 but now hung on processing request

Started by Deathmage85

Replies: 1
Views: 239

March 08, 2025, 06:37:45 AM
by Deathmage85

IPS not dropping eicar test file when https

Started by porigromus

Replies: 6
Views: 5,496

March 04, 2025, 03:31:22 PM
by Greg_E