Is Suricata running?

Started by hushcoden, August 15, 2020, 08:28:01 PM

Previous topic - Next topic
Since I don't have any entries in the 'Alerts' tab, I was wondering which woud be the best way to check that Suricata is actually running ?

Tia.

You can SSH into the box. Select option 8 for shell.

root@opnsense:/var/log/suricata # service suricata status
suricata is running as pid 87056.

Also you can check the log in /var/log/ and var/log/suricata

Or run a top command to see if suricata is loaded.

Depends on your rules there might be no alterts.
English: Never try, never know!
Deutsch: Unversucht ist Unerfahren!

Thanks, it's working:  ;D
root@gateway:~ # service suricata status
suricata is running as pid 23173.