Intrusion Detection and Prevention

[resolved] Suricata stopped working after updating to 22.10 BE

Started by greY

Replies: 1
Views: 3,144

November 01, 2022, 07:37:15 AM
by greY

[ERRCODE: SC_ERR_RULE_KEYWORD_UNKNOWN(102), etc.

Started by fxsaddict

Replies: 1
Views: 3,017

October 31, 2022, 11:43:37 PM
by fxsaddict

suricata not blocking nmap scan

Started by monkeydelufy

Replies: 6
Views: 7,155

October 31, 2022, 04:51:27 AM
by monkeydelufy

[Howto] Download and analyze interesting Suricata logs?

Started by ccna_student

Replies: 1
Views: 3,407

October 28, 2022, 08:03:20 AM
by ccna_student

IPS / Suricata ERRCODE: SC_ERR_PCAP_DISPATCH - The interface disappeared

Started by 3x3cut0r

Replies: 5
Views: 8,149

October 24, 2022, 04:35:07 PM
by 3x3cut0r

[ERRCODE: SC_ERR_CONF_YAML_ERROR(242)] - App-Layer protocol http2 enable status

Started by RamSense

Replies: 2
Views: 3,701

October 17, 2022, 09:05:25 AM
by RamSense

Looking for a powerful commercial ruleset

Started by m4rtin

Replies: 3
Views: 2,965

October 06, 2022, 02:50:28 PM
by franco

If stateful, why do I need to allow "out" AND "in" on WAN interface?

Started by BillyJoePiano

Replies: 3
Views: 8,605

October 03, 2022, 01:16:57 PM
by Demusman

Set Home Networks dynamically

Started by tcpip

Replies: 3
Views: 4,846

September 29, 2022, 03:36:02 PM
by The_Istar

Deleting rulesets

Started by teerakon piruk

Replies: 0
Views: 2,296

September 19, 2022, 04:27:17 AM
by teerakon piruk

since updating to 22.7 suricate is constantly stopping

Started by ravee piyawong

Replies: 1
Views: 2,376

September 18, 2022, 09:54:06 AM
by Taunt9930

Token not received

Started by eldiable

Replies: 0
Views: 2,360

September 14, 2022, 03:44:25 PM
by eldiable

ET Telemetry data collected in every minutes

Started by BlueHatDinuX

Replies: 1
Views: 2,499

September 12, 2022, 09:11:59 AM
by BlueHatDinuX

How to manage rules, policies and general guidance to live with Suricata?

Started by Relaxe

Replies: 0
Views: 2,598

September 08, 2022, 08:42:56 PM
by Relaxe

Maltrail block unifi inform url

Started by buzzd

Replies: 2
Views: 2,566

September 03, 2022, 05:44:49 PM
by buzzd

Excluding local hosts from IPS rules

Started by Blackwindo

Replies: 0
Views: 2,335

September 02, 2022, 10:42:04 AM
by Blackwindo

IPS mode destroying IPv6

Started by sunmast

Replies: 7
Views: 7,836

August 19, 2022, 12:15:45 PM
by joeyboon

Activating IDS looses network connection

Started by Ramipa Pimma

Replies: 1
Views: 4,763

August 16, 2022, 11:03:26 AM
by RamSense

Anyone know how to configure monit to send alerts after IDS rule is updated.

Started by Thongtuk05

Replies: 0
Views: 2,403

August 10, 2022, 08:20:58 AM
by Thongtuk05

Suricata Intrusion Detection reloading Rules every Minute

Started by priencecutie

Replies: 1
Views: 2,333

August 09, 2022, 03:48:04 AM
by nzkiwi68