Intrusion Detection and Prevention

Problem with add custome signature suricata

Started by linuxesabz

Replies: 1
Views: 2,151

December 18, 2020, 09:07:53 AM
by Wyka

Making an inline Suricata box using OPNsense

Started by liver007

Replies: 1
Views: 3,159

August 30, 2019, 11:36:19 PM
by spetrillo

Can't download rules

Started by ljhardy

Replies: 1
Views: 7,736

November 21, 2025, 05:11:05 PM
by ljhardy

Suricata crashed router by filling the drive with logs

Started by LOENS2

Replies: 3
Views: 3,139

August 23, 2023, 11:27:32 AM
by 9axqe

Suricata worked for months but now crashes 4 minutes after startup [SOLVED]

Started by lorem

Replies: 5
Views: 2,663

March 29, 2024, 04:05:55 AM
by lorem

IDS Interfaces

Started by Lost_Ones

Replies: 3
Views: 4,020

February 07, 2022, 09:09:20 PM
by Lost_Ones

System log entry involves a reported abuse IP, how to investigate?

Started by LouieLouie

Replies: 1
Views: 5,590

January 13, 2020, 10:05:31 PM
by dp

suricata reporting Scirius, Evebox or Kibana

Started by lshantz

Replies: 10
Views: 7,960

October 28, 2019, 11:24:06 PM
by lshantz

OPNsense as internal IDS

Started by lucasasdelli

Replies: 0
Views: 6,244

June 15, 2018, 04:47:46 PM
by lucasasdelli

crowdsec firewall bouncer does not start - pfctl crowdsec-blacklists not exist

Started by luckylinux

Replies: 11
Views: 6,043

June 05, 2024, 04:49:42 PM
by mmetc

Looking for a powerful commercial ruleset

Started by m4rtin

Replies: 3
Views: 2,518

October 06, 2022, 02:50:28 PM
by franco

[Solved] Beginner question: should i be conserned about this firewall logs?

Started by macege

Replies: 6
Views: 2,261

January 20, 2024, 01:57:14 AM
by macege

Excluding local hosts from IPS rules

Started by madj42

Replies: 0
Views: 2,497

December 25, 2019, 04:28:18 PM
by madj42

Snort rules v3

Started by MakesSense

Replies: 4
Views: 13,323

February 22, 2018, 10:18:48 PM
by dcol

since updating to 22.7 suricate is constantly stopping

Started by manilx

Pages1 2

Replies: 15
Views: 5,285

July 29, 2022, 09:12:14 AM
by manilx

IPS only shows allowed actions in alerts

Started by manuel

Replies: 3
Views: 6,176

March 01, 2019, 07:49:03 AM
by manuel

Struggling with Suricata

Started by manuel

Replies: 0
Views: 2,664

July 15, 2021, 12:09:47 PM
by manuel

Bypass IDS/IPS possible?

Started by marcri

Replies: 0
Views: 4,262

June 12, 2019, 03:27:42 PM
by marcri

Are there any configuration requirements to properly test with pcap traffic?

Started by marcus

Replies: 2
Views: 6,390

September 30, 2025, 02:24:17 AM
by someone

What is the proper way to verify that Suricata is ready to inspect traffic?

Started by marcus

Replies: 1
Views: 5,142

September 30, 2025, 02:52:59 AM
by someone