XIII
Very Senior Member
Finally getting some alerts for actions I trigger! (and also immediately some from the outside world...)
Looks like instead of this part in the provided config file:
I actually need to use this?
Source: https://home.regit.org/2012/09/new-af_packet-ips-mode-in-suricata/
Did I miss instructions somewhere?
And are there other parts in the YAML file that I need to change?
Looks like instead of this part in the provided config file:
Code:
af-packet:
- interface: eth0 ## set your wan interface
copy-mode: ips
copy-iface: br0
defrag: yes
use-mmap: yes
I actually need to use this?
Code:
af-packet:
- interface: eth0
copy-mode: ips
copy-iface: br0
defrag: yes
use-mmap: yes
- interface: br0
copy-mode: ips
copy-iface: eth0
defrag: yes
use-mmap: yes
Source: https://home.regit.org/2012/09/new-af_packet-ips-mode-in-suricata/
Did I miss instructions somewhere?
And are there other parts in the YAML file that I need to change?