Josh Patterson
795aa898a3
suricata: only reload rules once the ruleset file exists
...
On a fresh install the surirulesync file.recurse creates .gitkeep before
SOC has generated all-rulesets.rules. That change satisfied the
surirulereload onchanges requisite, so the reload ran with no ruleset
present, failed to stat the file, and reported the state (and install)
as failed.
Add an onlyif guard so the reload only runs when all-rulesets.rules
exists. A .gitkeep-only sync now leaves the state a clean success
(onlyif condition false); once SOC writes the ruleset, the reload fires
normally.
2026-07-01 15:12:54 -04:00
Josh Patterson
cceaebe350
remove restriction of mmap locked on suricata ulimits
2026-03-19 09:42:39 -04:00
Josh Patterson
e19e83bebb
allow user defined ulimits
2026-03-18 10:38:15 -04:00
Josh Patterson
4dc377c99f
DOCKER to DOCKERMERGED
2026-03-17 15:06:06 -04:00
DefensiveDepth
9304513ce8
Add support for suricata rules load status
2025-12-04 12:26:13 -05:00
DefensiveDepth
1b55642c86
Refactor rules location
2025-11-18 09:58:14 -05:00
m0duspwnens
7123c62876
add so-suricata container req for rule reload
2024-09-09 11:13:28 -04:00
Mike Reeves
afcb30be03
Threhsolds require a restart
2024-08-30 09:43:35 -04:00
Mike Reeves
b9f817201c
Add thresholds to the reload list
2024-08-30 09:15:25 -04:00
Mike Reeves
edce5186b9
Add support to relaod rules instead of restart
2024-08-29 12:55:06 -04:00
m0duspwnens
2c7eb3c755
only apply ulimits to suricata container if user enable mmap-locked
2024-04-25 10:05:59 -04:00
m0duspwnens
73b5bb1a75
add memlock to so-suricata container
2024-04-24 15:35:17 -04:00
Jason Ertel
a55e04e64a
pcap improvements
2024-03-08 15:48:53 -05:00
Mike Reeves and GitHub
58d222284e
Merge pull request #12271 from Security-Onion-Solutions/suripcap
...
Suricata PCAP
2024-03-04 17:27:38 -05:00
m0duspwnens
8b7f7933bd
suricata container watch classification.config
2024-02-26 15:29:13 -05:00
m0duspwnens
9a7e2153ee
add classification.config
2024-02-26 11:01:53 -05:00
Mike Reeves
00289c201e
fix pcap paths
2024-01-31 08:58:57 -05:00
m0duspwnens
0522dc180a
map pcap dir to container. enable pcap-log in map
2024-01-30 13:39:35 -05:00
m0duspwnens
d118ff4728
add GLOBALS.pcap_engine
2024-01-29 16:54:08 -05:00
Mike Reeves
ab551a747d
Threads placeholder logic
2024-01-29 15:44:57 -05:00
Mike Reeves
c9db6c0f18
Add Suricata
2023-05-24 10:18:58 -04:00
Mike Reeves
2c4ba2e8b2
Add Suricata
2023-05-24 09:35:50 -04:00
m0duspwnens
732d2aadf8
rename state to resolve conflicting / duplicate state ids
2023-05-24 08:58:43 -04:00
m0duspwnens
eb633be437
enable/disable suricata in ui. assign threads properly
2023-05-22 17:48:22 -04:00
Josh Patterson
DefensiveDepth
Mike Reeves
Jason Ertel
