247 Commits

Author	SHA1	Message	Date
Mike Reeves	f37f5ba97b	Update soc_suricata.yaml	2024-06-06 15:57:58 -04:00
Jason Ertel	4771810361	exclude detect-parse errors	2024-05-15 19:10:50 -04:00
Jason Ertel	252d9a5320	make rule settings advanced	2024-05-01 12:51:04 -04:00
Jason Ertel	c71af9127b	mark detections settings as read-only via the UI	2024-05-01 11:47:38 -04:00
Jason Ertel	84db82852c	annotation updates for custom settings	2024-04-30 15:14:56 -04:00
m0duspwnens	2c7eb3c755	only apply ulimits to suricata container if user enable mmap-locked	2024-04-25 10:05:59 -04:00
m0duspwnens	73b5bb1a75	add memlock to so-suricata container	2024-04-24 15:35:17 -04:00
m0duspwnens	13a6520a8c	mmap-locked default no	2024-04-24 13:50:12 -04:00
m0duspwnens	4b7f826a2a	quote is so true becomes yes	2024-04-24 13:29:55 -04:00
m0duspwnens	0bd0c7b1ec	allow for mmap-locked to be configured	2024-04-24 13:26:25 -04:00
Mike Reeves	d57f773072	Fix regex to allow ipv6 in bpfs	2024-03-27 09:36:42 -04:00
m0duspwnens	029d8a0e8f	handle yes/no on checksum-checks	2024-03-25 09:30:41 -04:00
m0duspwnens	81f3d69eb9	remove mmap-locked.	2024-03-22 15:55:59 -04:00
m0duspwnens	bb0da2a5c5	add additional suricata af-packet config items	2024-03-22 14:34:14 -04:00
Doug Burks	f3b921342e	FIX: Annotations for BPF and Suricata PCAP #12626	2024-03-20 16:06:25 -04:00
Doug Burks	fff4d20e39	Update soc_suricata.yaml	2024-03-20 16:03:45 -04:00
Doug Burks	d2fb067110	FIX: Annotations for BPF and Suricata PCAP #12626	2024-03-20 15:57:32 -04:00
Mike Reeves	fd835f6394	Update soc_suricata.yaml	2024-03-14 11:36:45 -04:00
Mike Reeves	284e0d8435	Update soc_suricata.yaml	2024-03-14 11:33:47 -04:00
Mike Reeves	72acb11925	Update soc_suricata.yaml	2024-03-11 19:04:51 -04:00
m0duspwnens	907cf9f992	transition pcap	2024-03-11 12:20:28 -04:00
Jason Ertel	a55e04e64a	pcap improvements	2024-03-08 15:48:53 -05:00
m0duspwnens	70f3ce0536	change how maxfiles is calculated	2024-03-06 17:32:06 -05:00
m0duspwnens	583227290f	fix max-files calc	2024-03-06 15:18:22 -05:00
m0duspwnens	cf232534ca	move suricata.pcap to suricata.config.outputs.pcap-log	2024-03-06 14:42:07 -05:00
Mike Reeves	7f1e786e3d	Consolidate PCAP settings	2024-03-06 12:56:09 -05:00
Mike Reeves	4dfa1a5626	Move Suricata around	2024-03-06 10:35:10 -05:00
Mike Reeves	a63fca727c	Update soc_suricata.yaml	2024-03-06 10:02:06 -05:00
Mike Reeves	58d222284e	Merge pull request #12271 from Security-Onion-Solutions/suripcap ... Suricata PCAP	2024-03-04 17:27:38 -05:00
m0duspwnens	fcc0f9d14f	redo classifications	2024-02-27 13:20:58 -05:00
m0duspwnens	8b7f7933bd	suricata container watch classification.config	2024-02-26 15:29:13 -05:00
m0duspwnens	466dac30bb	soup for classifications	2024-02-26 12:15:17 -05:00
m0duspwnens	9a7e2153ee	add classification.config	2024-02-26 11:01:53 -05:00
m0duspwnens	304ae49251	fix source	2024-02-09 12:41:23 -05:00
m0duspwnens	5903ae596c	move suricata rules to /opt/so/rules/nids/suri	2024-02-09 09:47:23 -05:00
m0duspwnens	f97d0f2f36	add /opt/so/rules/ to files_roots	2024-02-07 09:25:56 -05:00
Mike Reeves	00289c201e	fix pcap paths	2024-01-31 08:58:57 -05:00
m0duspwnens	0522dc180a	map pcap dir to container. enable pcap-log in map	2024-01-30 13:39:35 -05:00
m0duspwnens	d118ff4728	add GLOBALS.pcap_engine	2024-01-29 16:54:08 -05:00
Mike Reeves	ab551a747d	Threads placeholder logic	2024-01-29 15:44:57 -05:00
Mike Reeves	88c01a22d6	Add annotation logic	2024-01-29 15:27:28 -05:00
Mike Reeves	0c969312e2	Add Globals	2024-01-29 15:22:20 -05:00
Mike Reeves	1a2245a1ed	Add so-minion modifications	2024-01-29 13:44:53 -05:00
Mike Reeves	762a3bea17	Defaults and Annotations	2024-01-25 09:59:26 -05:00
m0duspwnens	dfe707ab64	fix issue/11610	2023-10-24 17:26:39 -04:00
Mike Reeves	4a3fc06a4d	Enable http2 for Suricata	2023-10-24 09:18:10 -04:00
Mike Reeves	710b800bc2	Update config.sls	2023-08-21 09:00:11 -04:00
m0duspwnens	30e3fbb41c	remove extra )	2023-08-09 11:21:16 -04:00
m0duspwnens	8844e305ab	use sensor.interface for suricata. make af-packet.interface ro in soc ui	2023-08-09 11:18:47 -04:00
m0duspwnens	20dedab4b2	remove previously add rules files	2023-08-08 15:03:06 -04:00