Open Information Security Foundation

09/04/2019

09:42 AM Suricata Support #3132: suricata can't capture all the packets

i found my problem
suricata.yaml
vlan:
use-for-tracking: true
change true to false yg lu

08/31/2019

03:28 AM Suricata Support #3132: suricata can't capture all the packets

i draw my network pic !! yg lu

03:21 AM Suricata Support #3132: suricata can't capture all the packets

my test method
1. span the network traffic to my machine p4p2 nic
2. start suricata monitor p4p2 port
cmd:
/us... yg lu

08/30/2019

11:50 AM Suricata Support #3132: suricata can't capture all the packets

btw: i use network span to capture traffic yg lu

08:55 AM Suricata Support #3132: suricata can't capture all the packets

my test method is
capture a http request and repeat several times, all the repeat got success response, and the web... yg lu

01:40 AM Suricata Support #3132: suricata can't capture all the packets

sublime editor add some numbers in front of some line , i fix it below
-------------
%YAML 1.1
---
# Surica... yg lu

01:37 AM Suricata Support #3132: suricata can't capture all the packets

here is my conf
--------------
%YAML 1.1
---
# Suricata configuration file. In addition to the comments descr... yg lu

08/29/2019

09:13 AM Suricata Support #3132: suricata can't capture all the packets

btw:
i have tried 4.1.x and 4.0.x versions and i have tried every runmode (pfring、pcap、afpacket) all can't works we... yg lu

09:00 AM Suricata Support #3132 (Closed): suricata can't capture all the packets

i try lots of tests to capture http packets use suricata, every time when i stop the capture, it tells me no packets ... yg lu

10/26/2018

02:41 AM Suricata Support #2647: how i can get all http data

Victor Julien wrote:
> Please see https://suricata.readthedocs.io/en/latest/output/eve/eve-json-output.html?highligh... yg lu