Suricata suricata_manager script

[ugandy]

Hi,
what's the difference between the two suricata_manager scripts on github? (ttgapers vs juched78)

thx

 

[juched]

Mine is based on ttgappers with some extra clean up to make the install work, and some further tweaks to the config file based on the thread conversation.

 

[Clark Griswald]

Does the usage still require .yml editing, etc, and any possibility of inclusion to amtm?

 

[ugandy]

@juched any chance the "date" column width can be adjusted? thx

 

[juched]

Does the usage still require .yml editing, etc, and any possibility of inclusion to amtm?

It should automatically set the base settings in the yaml for you. No inclusion in amtm... it doesnt' follow the standards with a menu. Not sure it is worth the effort based on minimal usage.

 

[Clark Griswald]

juched:
Thank You for the reply.

 

[L&LD]

@juched if it was in amtm, many, many more would be tempted to use it! (Me!).

 

[rgnldo]

Suricata in the Entware repository is uncertain. Use only in IDS mode and with few compatible rules.

 

[ttgapers]

Hi folks!

@rgnldo and @juched and all testers etc. congrats on this! I just got around to removing the old "manual" method and ran through the installer! Great work and apologies for the absence.


@juched - I have no issue removing my repo or repointing all to yours if it helps sort out the confusion. Whichever is best. Happy there is an installer and GUI front end for an awesome mod that doesn' t require any TrendMicro stuff!!!

 

[juched]

Hi folks!

@rgnldo and @juched and all testers etc. congrats on this! I just got around to removing the old "manual" method and ran through the installer! Great work and apologies for the absence.


@juched - I have no issue removing my repo or repointing all to yours if it helps sort out the confusion. Whichever is best. Happy there is an installer and GUI front end for an awesome mod that doesn' t require any TrendMicro stuff!!!

It only it had alerting too! Just don't have time right now to extend it for that.

I am not aware of any confusion. I am open to whatever you like.

 

[ttgapers]

It only it had alerting too! Just don't have time right now to extend it for that.

I am not aware of any confusion. I am open to whatever you like.

All good here if you are sir!

 

[New2This]

Seems to be working getting a lot of these

ET DOS Possible NTP DDoS Inbound Frequent Un-Authed MON_LIST Requests IMPL 0x02