259 Commits

Author	SHA1	Message	Date
Jason Ertel	0566f46d5b	Clarify enabled settings	2024-09-16 10:41:01 -04:00
Jason Ertel	217bb388a0	Clarify enabled settings	2024-09-16 10:05:17 -04:00
m0duspwnens	7123c62876	add so-suricata container req for rule reload	2024-09-09 11:13:28 -04:00
m0duspwnens	ba24c5b219	remove -it	2024-09-06 12:26:55 -04:00
m0duspwnens	576d218cd9	dont restart suricata during setup. retry rule reload for 3 minutes	2024-09-06 08:10:59 -04:00
m0duspwnens	6581979506	retry suricata rule reload	2024-09-05 07:33:56 -04:00
Mike Reeves	5811ee5897	Update so-suricata-reload-rules	2024-09-01 10:39:42 -04:00
Mike Reeves	afcb30be03	Threhsolds require a restart	2024-08-30 09:43:35 -04:00
Mike Reeves	b9f817201c	Add thresholds to the reload list	2024-08-30 09:15:25 -04:00
Mike Reeves	edce5186b9	Add support to relaod rules instead of restart	2024-08-29 12:55:06 -04:00
m0duspwnens	c8a8236401	handle suricata network and port vars as string or list	2024-08-13 15:44:08 -04:00
m0duspwnens	a23789287e	force var to be list of string	2024-07-15 11:29:47 -04:00
Mike Reeves	f37f5ba97b	Update soc_suricata.yaml	2024-06-06 15:57:58 -04:00
Jason Ertel	4771810361	exclude detect-parse errors	2024-05-15 19:10:50 -04:00
Jason Ertel	252d9a5320	make rule settings advanced	2024-05-01 12:51:04 -04:00
Jason Ertel	c71af9127b	mark detections settings as read-only via the UI	2024-05-01 11:47:38 -04:00
Jason Ertel	84db82852c	annotation updates for custom settings	2024-04-30 15:14:56 -04:00
m0duspwnens	2c7eb3c755	only apply ulimits to suricata container if user enable mmap-locked	2024-04-25 10:05:59 -04:00
m0duspwnens	73b5bb1a75	add memlock to so-suricata container	2024-04-24 15:35:17 -04:00
m0duspwnens	13a6520a8c	mmap-locked default no	2024-04-24 13:50:12 -04:00
m0duspwnens	4b7f826a2a	quote is so true becomes yes	2024-04-24 13:29:55 -04:00
m0duspwnens	0bd0c7b1ec	allow for mmap-locked to be configured	2024-04-24 13:26:25 -04:00
Mike Reeves	d57f773072	Fix regex to allow ipv6 in bpfs	2024-03-27 09:36:42 -04:00
m0duspwnens	029d8a0e8f	handle yes/no on checksum-checks	2024-03-25 09:30:41 -04:00
m0duspwnens	81f3d69eb9	remove mmap-locked.	2024-03-22 15:55:59 -04:00
m0duspwnens	bb0da2a5c5	add additional suricata af-packet config items	2024-03-22 14:34:14 -04:00
Doug Burks	f3b921342e	FIX: Annotations for BPF and Suricata PCAP #12626	2024-03-20 16:06:25 -04:00
Doug Burks	fff4d20e39	Update soc_suricata.yaml	2024-03-20 16:03:45 -04:00
Doug Burks	d2fb067110	FIX: Annotations for BPF and Suricata PCAP #12626	2024-03-20 15:57:32 -04:00
Mike Reeves	fd835f6394	Update soc_suricata.yaml	2024-03-14 11:36:45 -04:00
Mike Reeves	284e0d8435	Update soc_suricata.yaml	2024-03-14 11:33:47 -04:00
Mike Reeves	72acb11925	Update soc_suricata.yaml	2024-03-11 19:04:51 -04:00
m0duspwnens	907cf9f992	transition pcap	2024-03-11 12:20:28 -04:00
Jason Ertel	a55e04e64a	pcap improvements	2024-03-08 15:48:53 -05:00
m0duspwnens	70f3ce0536	change how maxfiles is calculated	2024-03-06 17:32:06 -05:00
m0duspwnens	583227290f	fix max-files calc	2024-03-06 15:18:22 -05:00
m0duspwnens	cf232534ca	move suricata.pcap to suricata.config.outputs.pcap-log	2024-03-06 14:42:07 -05:00
Mike Reeves	7f1e786e3d	Consolidate PCAP settings	2024-03-06 12:56:09 -05:00
Mike Reeves	4dfa1a5626	Move Suricata around	2024-03-06 10:35:10 -05:00
Mike Reeves	a63fca727c	Update soc_suricata.yaml	2024-03-06 10:02:06 -05:00
Mike Reeves	58d222284e	Merge pull request #12271 from Security-Onion-Solutions/suripcap ... Suricata PCAP	2024-03-04 17:27:38 -05:00
m0duspwnens	fcc0f9d14f	redo classifications	2024-02-27 13:20:58 -05:00
m0duspwnens	8b7f7933bd	suricata container watch classification.config	2024-02-26 15:29:13 -05:00
m0duspwnens	466dac30bb	soup for classifications	2024-02-26 12:15:17 -05:00
m0duspwnens	9a7e2153ee	add classification.config	2024-02-26 11:01:53 -05:00
m0duspwnens	304ae49251	fix source	2024-02-09 12:41:23 -05:00
m0duspwnens	5903ae596c	move suricata rules to /opt/so/rules/nids/suri	2024-02-09 09:47:23 -05:00
m0duspwnens	f97d0f2f36	add /opt/so/rules/ to files_roots	2024-02-07 09:25:56 -05:00
Mike Reeves	00289c201e	fix pcap paths	2024-01-31 08:58:57 -05:00
m0duspwnens	0522dc180a	map pcap dir to container. enable pcap-log in map	2024-01-30 13:39:35 -05:00