Project

General

Profile

Actions
Copy link

Feature #781

closed
PH GL

IDS using NFLOG iptables target

Feature #781: IDS using NFLOG iptables target

Added by Premysl Hruby about 13 years ago. Updated almost 12 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Giuseppe Longo
Target version:
2.0.2
Effort:
Difficulty:
Label:

Description

It would be super nice if Suricata would be able to process packets send from NFLOG iptables target.

Usecases:
  • More complex filtering of trafic which should be checked by Suricata
  • Using Suricata only on traffic which got ACCEPTed by iptables, no-one is interested about traffic he's droping on FW
Actions
Copy link

Also available in: PDF Atom