Project

General

Profile

Actions
Copy link

Feature #2115

open
AB OD

Changing interfaces

Feature #2115: Changing interfaces

Added by Arturo Borrero Gonzalez almost 9 years ago. Updated almost 9 years ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Hi,

a debian users has opened a bug [0] requesting some features,
specifically he request support for an environment where interfaces may change from execution to execution.

The original text:

==== 8< ====
On my netbook I regularly change the interface, which is connected to the internet.
So maybe some day I need eth0, the next day wlan0 and also ppp0 (via UMTS) is often in use.

I want suricata check all the interfaces. All shall have the same ruleset. How can I tell suricata to do so, if possible at all?
One solution may be, to create and start suricata with a seperate configuration for eth0, one for wlan0 and one for ppp0.
But that is annoying. In snort it was possible, just to tell which interfaces shall be included, it was very easy.
Hope there is a same easy way in suricata.

==== 8< ====

[0] https://bugs.debian.org/861822

AH Updated by Andreas Herz almost 9 years ago Actions
Copy link
 #1

  • Tracker changed from Bug to Feature
  • Assignee set to OISF Dev
  • Target version set to TBD

VJ Updated by Victor Julien almost 9 years ago Actions
Copy link
 #2

Wonder if you could use '-i any'. Or maybe define all the interfaces in use in the yaml.

Actions
Copy link

Also available in: PDF Atom