Intrusion Detection and Prevention

IDS on 7 interfaces OPNSense - hang Suricata

Started by shopin

Replies: 0
Views: 1,169

December 04, 2022, 07:50:09 AM
by shopin

block udp quic connections - collateral damage? + the end of firewalls

Started by guernseybunker

Replies: 0
Views: 1,296

December 03, 2022, 05:32:15 PM
by guernseybunker

Making an inline Suricata box using OPNsense

Started by Ratchaphon

Replies: 0
Views: 994

December 02, 2022, 03:58:15 PM
by Ratchaphon

snort_vrt.rulesfile field what a choise i have to made ?

Started by megazocker

Replies: 2
Views: 2,161

November 27, 2022, 10:14:13 AM
by skyfighter

Newbie question: 'in' on WAN versus 'out' on LAN for IDS?

Started by gctwnl

Replies: 3
Views: 2,498

November 26, 2022, 11:55:40 AM
by gctwnl

Ruleset to find coin mining activity?

Started by -blade-

Replies: 1
Views: 4,615

November 16, 2022, 08:40:14 PM
by deanalepa

IDS Logs

Started by danderson

Replies: 1
Views: 1,597

November 14, 2022, 08:42:43 PM
by danderson

Suricata GUI feature requests

Started by Relaxe

Replies: 2
Views: 2,580

November 04, 2022, 10:56:17 AM
by stan

How to use the Policy feature in Suricata on OpnSense.

Started by Kwangyai04

Replies: 2
Views: 1,754

November 04, 2022, 10:50:03 AM
by stan

[solved] Suricata stopped working after updating to OPNsense 22.7.6

Started by meschmesch

Replies: 0
Views: 1,550

November 02, 2022, 07:06:00 PM
by meschmesch

[resolved] Suricata stopped working after updating to 22.10 BE

Started by greY

Replies: 1
Views: 1,493

November 01, 2022, 07:37:15 AM
by greY

[ERRCODE: SC_ERR_RULE_KEYWORD_UNKNOWN(102), etc.

Started by fxsaddict

Replies: 1
Views: 1,811

October 31, 2022, 11:43:37 PM
by fxsaddict

suricata not blocking nmap scan

Started by monkeydelufy

Replies: 6
Views: 4,141

October 31, 2022, 04:51:27 AM
by monkeydelufy

[Howto] Download and analyze interesting Suricata logs?

Started by ccna_student

Replies: 1
Views: 1,814

October 28, 2022, 08:03:20 AM
by ccna_student

IPS / Suricata ERRCODE: SC_ERR_PCAP_DISPATCH - The interface disappeared

Started by 3x3cut0r

Replies: 5
Views: 3,015

October 24, 2022, 04:35:07 PM
by 3x3cut0r

[ERRCODE: SC_ERR_CONF_YAML_ERROR(242)] - App-Layer protocol http2 enable status

Started by RamSense

Replies: 2
Views: 2,311

October 17, 2022, 09:05:25 AM
by RamSense

Looking for a powerful commercial ruleset

Started by m4rtin

Replies: 3
Views: 2,031

October 06, 2022, 02:50:28 PM
by franco

If stateful, why do I need to allow "out" AND "in" on WAN interface?

Started by BillyJoePiano

Replies: 3
Views: 4,865

October 03, 2022, 01:16:57 PM
by Demusman

Set Home Networks dynamically

Started by tcpip

Replies: 3
Views: 2,563

September 29, 2022, 03:36:02 PM
by The_Istar

Deleting rulesets

Started by teerakon piruk

Replies: 0
Views: 1,269

September 19, 2022, 04:27:17 AM
by teerakon piruk