Open Information Security Foundation

12/05/2018

05:44 PM Suricata Support #2729 (Closed): /var/log/suricata/fast.log full because of a rules

hello,
I try to understand a rules in suricata, it is :... lolilol party

11/08/2018

09:02 AM Suricata Support #2666 (Closed): add BPF filter from /etc/init.d/suricata to /etc/suricata/suricata.yaml

hello,
I have a bpf filter in /etc/init.d/suricata ... lolilol party

10/15/2018

10:04 AM Suricata Support #2642: ignoring/drop GRE or MPLS protole into Suricata IDS

forget my above post,
I try this 'not proto 47', so it is good, now for mpls, I want to filtre mlps above udp prot... lolilol party

09:28 AM Suricata Support #2642: ignoring/drop GRE or MPLS protole into Suricata IDS

lolilol party wrote:
> Victor Julien wrote:
> > Can you try my suggestion from comment #1 above? 'not proto 47'
> ... lolilol party

09:24 AM Suricata Support #2642: ignoring/drop GRE or MPLS protole into Suricata IDS

Victor Julien wrote:
> Can you try my suggestion from comment #1 above? 'not proto 47'
yes I did that, after sear... lolilol party

09:10 AM Suricata Support #2642: ignoring/drop GRE or MPLS protole into Suricata IDS

Victor Julien wrote:
> Can you show what you tried so far? I have used a gre bpf quite recently, so at least that pa... lolilol party

08:12 AM Suricata Support #2642: ignoring/drop GRE or MPLS protole into Suricata IDS

lolilol party wrote:
> Victor Julien wrote:
> > https://suricata.readthedocs.io/en/latest/performance/ignoring-traf... lolilol party

07:52 AM Suricata Support #2642: ignoring/drop GRE or MPLS protole into Suricata IDS

Victor Julien wrote:
> https://suricata.readthedocs.io/en/latest/performance/ignoring-traffic.html#capture-filters-b... lolilol party

10/13/2018

07:27 PM Suricata Support #2642: ignoring/drop GRE or MPLS protole into Suricata IDS

Victor Julien wrote:
> Sounds like something for a BPF? A filter like 'not proto 47' to ignore GRE. MPLS can probabl... lolilol party

10/12/2018

05:49 PM Suricata Support #2642 (Closed): ignoring/drop GRE or MPLS protole into Suricata IDS

Hello,
I have installed suricata IDS in my compute.
The probe works well with init.d (/ usr / bin / suricata -c... lolilol party