Show Posts
1
Intrusion Detection and Prevention / Intrusion detection no showing alerts
« on: May 07, 2019, 06:19:31 pm »
Hi all
I activate Intrusion Detection, but I do not see alerts.
OPNsense 19.1.7-amd64
suricata 4.1.4
my config:
Enabled [X]
IPS mode [ ]
Promiscuous mode [X]
Pattern matcher Hyperscan
Interfaces [WAN]
the only thing I see in the log is this warning:
OPNsense meerkat: [101053] <Warning> - [ERRCODE: SC_WARN_DEFAULT_WILL_CHANGE (317)] - in 5.0 the default for decoder event stats will go from 'decoder. <Proto>. <Event>' to 'decoder.event. <Proto >. <event> '. See ticket # 2225. To suppress this message, set stats.decoder-events-prefix in the yaml.
Can you help me please?
I activate Intrusion Detection, but I do not see alerts.
OPNsense 19.1.7-amd64
suricata 4.1.4
my config:
Enabled [X]
IPS mode [ ]
Promiscuous mode [X]
Pattern matcher Hyperscan
Interfaces [WAN]
the only thing I see in the log is this warning:
OPNsense meerkat: [101053] <Warning> - [ERRCODE: SC_WARN_DEFAULT_WILL_CHANGE (317)] - in 5.0 the default for decoder event stats will go from 'decoder. <Proto>. <Event>' to 'decoder.event. <Proto >. <event> '. See ticket # 2225. To suppress this message, set stats.decoder-events-prefix in the yaml.
Can you help me please?