Topics

Hi everyone!
I would like to test Suricata, one way to do this is to connect it inline, activate a bunch of rules that I know how to trigger using various tools like NMAP but is there a better way?

Is there a script or a tool that can emulate a bunch of known/simple attacks?

Coming from commercial IDS/IPS systems, you usually have access to such tools but I could not find anything for Suricata.
I really hope that someone here can help me out.

Thank you upfront!

Hi,
I am using CURL in Linux, trying to grab the eve.json log via the API.
Following the documentation, I am executing the following command:



curl -k -u "********":"*******" http://192.168.13.37/api/ids/service/getAlertLogs/$filedid=
or
curl -k -u "********":"*******" http://192.168.13.37/api/ids/service/getAlertLogs/$alertId

But I am getting nothing in return other than:
[{"size":2095025,"modified":"2020\/06\/03 11:36","filename":"eve.json","sequence":null},{"size":19470158,"modified":"2020\/05\/24 22:54","filename":"eve.json.0","sequence":0}]

What am I doing wrong?

Please help me.

Best regards,
Albert