Is Suricata running?

[hushcoden]

Since I don't have any entries in the 'Alerts' tab, I was wondering which woud be the best way to check that Suricata is actually running ?

Tia.

[ArminF]

You can SSH into the box. Select option 8 for shell.

root@opnsense:/var/log/suricata # service suricata status
suricata is running as pid 87056.

Also you can check the log in /var/log/ and var/log/suricata

Or run a top command to see if suricata is loaded.

Depends on your rules there might be no alterts.

[hushcoden]

Thanks, it's working: 

Code: [Select]

root@gateway:~ # service suricata status
suricata is running as pid 23173.