Commit Graph

113 Commits

Author SHA1 Message Date
m0duspwnens
1fca5e65df redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681 2020-11-10 15:31:47 -05:00
weslambert
71a260a000 Match max-pending-packets size 2020-11-02 08:38:45 -05:00
m0duspwnens
34dfc809c7 handle thread count for suricata and default max-pending-packets to 5000 - https://github.com/Security-Onion-Solutions/securityonion/issues/1460 2020-10-06 13:57:50 -04:00
m0duspwnens
63884b73e1 enable suricata threshold-file and point to proper file - https://github.com/Security-Onion-Solutions/securityonion/issues/1441 2020-10-05 12:10:52 -04:00
Mike Reeves
0a0e00866c Upgrade Fun 2020-09-14 14:50:22 -04:00
m0duspwnens
09cc8ae1fb fail the state if it isnt in top 2020-09-09 16:48:50 -04:00
m0duspwnens
01c9f7b2ae merge with dev and resolve conflicts 2020-09-09 16:23:36 -04:00
weslambert
8db8dcb71a Change HOME_NET and EXTERNAL_NET defaults 2020-09-03 08:15:14 -04:00
m0duspwnens
a229ae82ce only allow state to run if it is in top for the node 2020-09-02 16:15:52 -04:00
Mike Reeves
a97ca94354 Rotate suri stats log hourly 2020-08-23 16:08:17 -04:00
Mike Reeves
ebd8105cb5 Rotate suri stats log hourly 2020-08-23 16:03:37 -04:00
Jason Ertel
9c6cc81f70 Remove improper suricata logging filter - this re-enables logging output for the suricata process itself 2020-08-21 12:44:28 -04:00
Mike Reeves
2b88f22eb2 Make HUP for rotate more reliable 2020-08-20 17:57:36 -04:00
Mike Reeves
b7da768dc7 add logrotate 2020-08-20 16:46:32 -04:00
m0duspwnens
35027e32b3 dont constantly run steno or suricata containers for import node 2020-08-14 14:43:37 -04:00
Mike Reeves
24ed92c9dc minio and change to global 2020-08-04 15:54:03 -04:00
m0duspwnens
e3efaee864 change reference from bro to zeek 2020-07-17 14:41:44 -04:00
Jason Ertel
8f66a27f07 Refactor image repository to a single variable 2020-07-13 18:26:43 -04:00
m0duspwnens
5ca3ecf4bd fix reference to master grain 2020-07-09 15:42:39 -04:00
m0duspwnens
3cf31e2460 https://github.com/Security-Onion-Solutions/securityonion/issues/404 2020-07-09 11:27:06 -04:00
m0duspwnens
d7580fe6a0 fix suricata state if suripins or suri procs arent set 2020-06-29 15:38:05 -04:00
m0duspwnens
0b1a258a4b change sensor homenet map 2020-06-26 14:43:27 -04:00
m0duspwnens
2079eba0ad Merge remote-tracking branch 'remotes/origin/dev' into feature/suripillar 2020-06-26 13:09:15 -04:00
m0duspwnens
052c65c05e add the things to pillarize suricata - https://github.com/Security-Onion-Solutions/securityonion/issues/584 2020-06-26 13:07:41 -04:00
Mike Reeves
30ac5f9764 ADding Suricata log compression 2020-06-25 12:56:26 -04:00
m0duspwnens
36a329214a merge eve-log in outputs for suricata meta data generation or zeek/default - https://github.com/Security-Onion-Solutions/securityonion/issues/584 2020-06-22 16:56:03 -04:00
m0duspwnens
57fa2c5abe Merge remote-tracking branch 'remotes/origin/dev' into feature/suripillar 2020-06-18 13:49:07 -04:00
Mike Reeves
79adf2012a Fix log rotate on Suricata 2020-06-04 10:43:24 -04:00
m0duspwnens
f8193cb914 beginning to pillarize suricata 2020-06-04 09:40:38 -04:00
TOoSmOotH
9b6822f325 DNS Suricata parser 2020-06-03 20:40:57 -04:00
TOoSmOotH
702a14e90c DNS Suricata parser 2020-06-03 20:40:10 -04:00
Mike Reeves
45d17c5148 Pillarize Suricata Round 1 2020-06-01 14:53:04 -04:00
m0duspwnens
1737b46abb Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-06-01 12:15:00 -04:00
Mike Reeves
03f34404b1 Suricata 5 Meta Data 2020-06-01 11:03:43 -04:00
m0duspwnens
6db8470de7 Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-05-29 13:09:49 -04:00
m0duspwnens
40fa5293bf move fileserve update to suricata.master 2020-05-28 15:54:11 -04:00
weslambert
12f426d4f4 Move eve.json to /nsm 2020-05-28 12:59:41 -04:00
m0duspwnens
4f15de8b77 refresh salt fileserver if suricata rule symlink is created 2020-05-28 12:00:22 -04:00
Mike Reeves
8304d91b0b Merge branch 'dev' into feature/suri5 2020-05-28 09:41:28 -04:00
m0duspwnens
12a6da928f create /opt/so/saltstack/local/salt/suricata - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-27 15:00:11 -04:00
m0duspwnens
40f04ef6d0 merge with dev and fix conflicts 2020-05-27 13:54:08 -04:00
Wes Lambert
d56bc4c167 fix path 2020-05-27 17:01:05 +00:00
Wes Lambert
e78a3f3278 update Suricata config 2020-05-27 16:59:26 +00:00
Wes Lambert
b7a0f79038 Update Suricata init 2020-05-27 16:58:31 +00:00
m0duspwnens
693000afa8 remove addtotab templates and move surirulelink - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-27 12:30:12 -04:00
Mike Reeves
68dd333fbe Remove stats from eve.json 2020-05-26 17:49:11 -04:00
Mike Reeves
1259338e6c Remvoe old Suricata.yml 2020-05-26 17:44:19 -04:00
Mike Reeves
8e95115a7c Update Suricata.yml 2020-05-26 17:43:32 -04:00
Mike Reeves
b748a86694 Suricata 5 initial commit 2020-05-26 15:12:00 -04:00
m0duspwnens
766b56a944 update dockers to 1.2.2 2020-04-23 10:11:26 -04:00