Intrusion Detection and Prevention

Normal to see 5~10 ip blocks every minute?

Started by torchsong

Replies: 3
Views: 2,033

December 17, 2022, 01:29:01 PM
by guenti_r

GeoIP Missing from IDS "User Defined" Rules

Started by sasi wan

Replies: 1
Views: 1,998

December 15, 2022, 10:24:04 AM
by guenti_r

IDS on 7 interfaces OPNSense - hang Suricata

Started by shopin

Replies: 0
Views: 2,207

December 04, 2022, 07:50:09 AM
by shopin

block udp quic connections - collateral damage? + the end of firewalls

Started by guernseybunker

Replies: 0
Views: 2,158

December 03, 2022, 05:32:15 PM
by guernseybunker

Making an inline Suricata box using OPNsense

Started by Ratchaphon

Replies: 0
Views: 2,489

December 02, 2022, 03:58:15 PM
by Ratchaphon

snort_vrt.rulesfile field what a choise i have to made ?

Started by megazocker

Replies: 2
Views: 2,933

November 27, 2022, 10:14:13 AM
by skyfighter

Newbie question: 'in' on WAN versus 'out' on LAN for IDS?

Started by gctwnl

Replies: 3
Views: 3,838

November 26, 2022, 11:55:40 AM
by gctwnl

Ruleset to find coin mining activity?

Started by -blade-

Replies: 1
Views: 7,713

November 16, 2022, 08:40:14 PM
by deanalepa

IDS Logs

Started by danderson

Replies: 1
Views: 3,224

November 14, 2022, 08:42:43 PM
by danderson

Suricata GUI feature requests

Started by Relaxe

Replies: 2
Views: 3,179

November 04, 2022, 10:56:17 AM
by stan

How to use the Policy feature in Suricata on OpnSense.

Started by Kwangyai04

Replies: 2
Views: 2,259

November 04, 2022, 10:50:03 AM
by stan

[solved] Suricata stopped working after updating to OPNsense 22.7.6

Started by meschmesch

Replies: 0
Views: 2,460

November 02, 2022, 07:06:00 PM
by meschmesch

[resolved] Suricata stopped working after updating to 22.10 BE

Started by greY

Replies: 1
Views: 2,595

November 01, 2022, 07:37:15 AM
by greY

[ERRCODE: SC_ERR_RULE_KEYWORD_UNKNOWN(102), etc.

Started by fxsaddict

Replies: 1
Views: 2,582

October 31, 2022, 11:43:37 PM
by fxsaddict

suricata not blocking nmap scan

Started by monkeydelufy

Replies: 6
Views: 5,922

October 31, 2022, 04:51:27 AM
by monkeydelufy

[Howto] Download and analyze interesting Suricata logs?

Started by ccna_student

Replies: 1
Views: 2,957

October 28, 2022, 08:03:20 AM
by ccna_student

IPS / Suricata ERRCODE: SC_ERR_PCAP_DISPATCH - The interface disappeared

Started by 3x3cut0r

Replies: 5
Views: 7,280

October 24, 2022, 04:35:07 PM
by 3x3cut0r

[ERRCODE: SC_ERR_CONF_YAML_ERROR(242)] - App-Layer protocol http2 enable status

Started by RamSense

Replies: 2
Views: 3,226

October 17, 2022, 09:05:25 AM
by RamSense

Looking for a powerful commercial ruleset

Started by m4rtin

Replies: 3
Views: 2,625

October 06, 2022, 02:50:28 PM
by franco

If stateful, why do I need to allow "out" AND "in" on WAN interface?

Started by BillyJoePiano

Replies: 3
Views: 7,367

October 03, 2022, 01:16:57 PM
by Demusman