Intrusion Detection and Prevention

[SOLVED] Suricata logs gets automatically deleted

Started by Wrigleys

Replies: 1
Views: 2,919

August 11, 2024, 09:43:42 PM
by Wrigleys

Custom Rules for IDS/IPS in OPNsense 24.7

Started by secdoc

Replies: 0
Views: 2,404

August 07, 2024, 10:09:05 PM
by secdoc

[SOLVED] Proofpoint Telemetry status

Started by fightingmasta

Replies: 9
Views: 9,800

August 06, 2024, 04:21:06 PM
by franco

ET Telemetry widget not working after OPNsense update 24.7_5

Started by albovell

Replies: 9
Views: 8,046

August 01, 2024, 01:14:56 PM
by Ahmedaborady

To block or reject connections on a specific port?

Started by grimelog

Replies: 3
Views: 4,513

July 11, 2024, 03:27:57 AM
by grimelog

Suricata > IDS/IPS >Policies > bind policy to set of domain names [whatsapp]

Started by dotgate

Replies: 1
Views: 3,055

July 08, 2024, 04:21:58 AM
by OPNsenseNewbee

Suricata high CPU load

Started by flaviuvlaicu

Replies: 0
Views: 2,422

July 07, 2024, 07:54:30 PM
by flaviuvlaicu

Suricata IDS Error Message

Started by crazysense

Replies: 2
Views: 2,929

June 28, 2024, 09:21:53 AM
by extraomelette

Newb Question; how to log all packets, promiscuous mode on WAN

Started by someone

Replies: 5
Views: 3,318

June 26, 2024, 11:26:06 PM
by someone

Talos_LightSPD.tar.gz and snortrules-snapshot-31470.tar.gz

Started by dotgate

Replies: 3
Views: 2,808

June 26, 2024, 10:12:44 PM
by dotgate

Newb Question on DNS

Started by someone

Replies: 2
Views: 2,507

June 26, 2024, 02:16:40 AM
by someone

Emulated Netmap Error - Brings down traffic

Started by riddlezz

Replies: 1
Views: 2,520

June 24, 2024, 09:13:51 PM
by Damdav

Measure suricata rule reload lag time

Started by someone

Replies: 1
Views: 2,724

June 23, 2024, 06:58:51 PM
by someone

[SOLVED] Suricata slows outbound traffic by a factor of 10 on KVM/virtio

Started by deajan

Replies: 8
Views: 10,507

June 12, 2024, 11:10:54 PM
by deajan

Suricata behavior

Started by someone

Replies: 1
Views: 2,435

June 11, 2024, 03:36:48 PM
by Greg_E

Newb Question, Where do we put IP Blocklists

Started by someone

Replies: 1
Views: 2,440

June 10, 2024, 10:18:15 PM
by cookiemonster

How to filter alerts to show things that weren't "action: allowed"

Started by adfh

Replies: 5
Views: 6,275

June 08, 2024, 11:40:19 PM
by someone

what does master exception-policy set to ignored mean

Started by someone

Replies: 0
Views: 2,432

June 08, 2024, 11:32:38 PM
by someone

crowdsec firewall bouncer does not start - pfctl crowdsec-blacklists not exist

Started by luckylinux

Replies: 11
Views: 9,697

June 05, 2024, 04:49:42 PM
by mmetc

Error Msg on OPNsense Console??

Started by spetrillo

Replies: 3
Views: 3,374

May 30, 2024, 07:59:01 PM
by Greg_E