python (65.1k questions)

javascript (44.2k questions)

reactjs (22.7k questions)

java (20.8k questions)

c# (17.4k questions)

html (16.3k questions)

r (13.7k questions)

android (12.9k questions)

Questions - suricata

Suricata dont drop packets

I have a server with Suricata (169.69.1.11) installed and a specific rule: drop ICMP any any -> 169.69.1.11 any (msg: "ping dropped";sid:10001;) In other VM I execute: ping 169.69.1.11 -...
test-img

user13643470

ids

suricata

ips

Votes: 0

Answers: 1

Latest Answer

My first problem is I didn't have Suricata IPS, first delete ur iptables rules with sudo iptables -F sudo iptables -I INPUT -j NFQUEUE sudo iptables -I OUTPUT -j NFQUEUE sudo iptables -I FORWARD -j...
test-img

user13643470

SURICATA - <Error> - [ERRCODE: SC_ERR_DUPLICATE_SIG(176)]

When i execute sudo suricata -i enp0s8 -c suricata.yaml -s rules/misreglas.rules Get the output: <Error> - [ERRCODE: SC_ERR_DUPLICATE_SIG(176)] - Duplicate signature "drop http $HOME_NET ...
test-img

user13643470

linux

ids

suricata

Votes: 0

Answers: 1

Latest Answer

You have to put the rules like that: drop ICMP any any -> 169.69.1.11 any (msg: "test";sid:10001;) drop HTTP $HOME_NET any -> any any (msg: "HTTP DROP";sid:10002;) where I p...
test-img

user13643470

How python subprocess can detect a negative exit code? How to force it return 0 instead?

I'm using pkill to send USR2 signal to suricata by python subprocess as below: #!/usr/bin/python3 script_command='pkill -SIGUSR2 -f /usr/bin/suricata' exit_status = subprocess.call(script_command, en...
test-img

Nguyễn Louis

python

suricata

pkill

Votes: 0

Answers: 1

Latest Answer

The documentation you've linked says A negative value -N indicates that the child was terminated by signal N (POSIX only). This implies that the process run by subprocess.call() was killed by SIGUSR...
test-img

AKX

Posts

Questions

Blogs

Jobs