Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
Eric Leblond 1e36053eca af-packet: force suricata in IPS mode when needed
AF_PACKET is not setting the engine mode to IPS when some
interfaces are peered and use IPS mode. This is due to the
fact, it is possible to peer 2 interfaces and run an IPS on
them and have a third one that is running in normal IDS mode.

In fact this choice is the bad one as unwanted side effect is
that there is no drop log and that stream inline is not used.

To fix that, this patch puts suricata in IPS mode as soon as
there is two interfaces in IPS mode. And it displays a error
message to warn user that the accuracy of detection on IDS only
interfaces will be low.
11 years ago
benches
contrib Add option on Tile-Gx for logging for fast.log alerts over PCIe 12 years ago
doc
lua output-lua: add SCPacketTimeString 11 years ago
m4
qa prscript: update URL 11 years ago
rules stream: detect and filter out bad window updates 11 years ago
scripts suricatasc: add -c flag to run command 11 years ago
src af-packet: force suricata in IPS mode when needed 11 years ago
.gitignore unittest: make check use a qa/log dir for logging 13 years ago
.travis.yml travis-ci: use make check 11 years ago
COPYING
ChangeLog Update Changelog for 2.1beta1 11 years ago
LICENSE
Makefile.am make install-full: get correct version of ET 12 years ago
Makefile.cvs
acsite.m4
autogen.sh
classification.config
config.rpath
configure.ac lua: improve configure checks 11 years ago
doxygen.cfg doxygen: add source browser 12 years ago
reference.config
suricata.yaml.in streaming-loggers: add configuration 11 years ago
threshold.config