User Tools

Site Tools


tips:suricata-eve-unixsocket

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revisionBoth sides next revision
tips:suricata-eve-unixsocket [2020/09/10 16:26] – [7. Updating with latest ruleset] veeratips:suricata-eve-unixsocket [2020/09/10 16:28] – [2. Installing Suricata version 5.0] veera
Line 20: Line 20:
 apt-get install suricata apt-get install suricata
 </code> </code>
 +
 +
 +===== Updating with latest ruleset =====
 +
 +Use the following command to update the latest emerging-threats ruleset
 +
 +<code>sudo suricata-update</code>
 +
 +suricata-update puts the combined rules in ''/var/lib/suricata/rules'' which is owned by root. Make sure the trisul user can read this directory.
 +
 +<code>sudo chown trisul.trisul /var/lib/suricata -R </code>
 +
 +
 +
 +
 +
 +
  
 ==== 3. Installing Emerging Threat Rules 5.0 ==== ==== 3. Installing Emerging Threat Rules 5.0 ====
tips/suricata-eve-unixsocket.txt · Last modified: 2020/09/28 17:22 by navaneeth