<div dir="ltr"><div>Hi ,<br><br><span><span><span><span><span><span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-il">RUST enabled Suricata 4.1 beta1 packages are available as well </span></span></span></span></span></span></span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-m_8002342989052303038gmail-m_7597792384766568316gmail-m_889112295789798602gmail-m_6122786599867899721gmail-m_4955962140363648144gmail-m_557006789419501953gmail-m_-664065560919861124gmail-il">now</span> <span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-m_8002342989052303038gmail-m_7597792384766568316gmail-m_889112295789798602gmail-m_6122786599867899721gmail-m_4955962140363648144gmail-m_557006789419501953gmail-m_-664065560919861124gmail-il"></span></span> for <span><span><span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-m_8002342989052303038gmail-m_7597792384766568316gmail-m_889112295789798602gmail-m_6122786599867899721gmail-m_4955962140363648144gmail-m_557006789419501953gmail-m_-664065560919861124gmail-il">Ubuntu</span></span></span></span> on <span><span><span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-m_8002342989052303038gmail-m_7597792384766568316gmail-m_889112295789798602gmail-m_6122786599867899721gmail-m_4955962140363648144gmail-m_557006789419501953gmail-m_-664065560919861124gmail-il">Ubuntu</span></span></span></span> <span><span><span><span><span><span><span><span><span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-m_8002342989052303038gmail-m_7597792384766568316gmail-m_889112295789798602gmail-m_6122786599867899721gmail-m_4955962140363648144gmail-m_557006789419501953gmail-m_-664065560919861124gmail-il">PPA</span></span></span></span></span></span></span></span></span></span> (<span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-m_8002342989052303038gmail-m_7597792384766568316gmail-m_889112295789798602gmail-m_6122786599867899721gmail-m_4955962140363648144gmail-m_557006789419501953gmail-m_-664065560919861124gmail-il">Launchpad</span></span>) - for testing and feedback.<br>












<br></div><div>If you would like to enable and try the new features like for example full SMB support and fileextraction - here is a quick how to from our experimental repo:<br><br>add-apt-repository ppa:oisf/suricata-rust-experimental  <br>apt-get update && apt-get install suricata<br><br></div><div>That repo includes experimental Rust enabled Suricata packages<br></div><div><ul><li>14.04 Trusty</li><li>16.04 Xenial</li><li>17.10 Artful</li><li>18.04 Bionic<br></li></ul> 32 and 64 bit <span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-m_8002342989052303038gmail-m_7597792384766568316gmail-m_889112295789798602gmail-m_6122786599867899721gmail-m_4955962140363648144gmail-m_557006789419501953gmail-m_-664065560919861124gmail-il">packages</span></span> <span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-m_8002342989052303038gmail-m_7597792384766568316gmail-m_889112295789798602gmail-m_6122786599867899721gmail-m_4955962140363648144gmail-m_557006789419501953gmail-m_-664065560919861124gmail-il">available</span></span> with the following architectures - <br><ul><li>amd64 </li><li>i386</li></ul>Some of the new additions in 4.1 beta1 include (available in the package) the tools:<br><ul><li><a href="http://suricata.readthedocs.io/en/latest/rule-management/suricata-update.html#rule-management-with-suricata-update" target="_blank">suricata-update</a></li><li>suricatactl (<a href="https://github.com/OISF/suricata/blob/master/suricata.yaml.in#L456" target="_blank">for use with filestore v2</a>)<br></li></ul><p>You can also get some help of how to use the tools by doing "suricata-update -h" or "suricatactl -h"<br></p></div><div><br>The <span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-m_8002342989052303038gmail-m_7597792384766568316gmail-m_889112295789798602gmail-m_6122786599867899721gmail-m_4955962140363648144gmail-m_557006789419501953gmail-m_-664065560919861124gmail-il">packages</span></span> are build-in with:<b> <br>







</b><ul><li><b>IPS (nfqueue) </b></li><li><b><a href="http://suricata.readthedocs.io/en/suricata-4.0.4/output/eve/eve-json-output.html" target="_blank">All JSON output</a><br></b></li><li><a href="https://redmine.openinfosecfoundation.org/projects/suricata/wiki/GeoIP" target="_blank"><b>GeoIP</b></a></li><li><a href="http://suricata.readthedocs.io/en/suricata-4.0.4/unix-socket.html?highlight=unix%20socket" target="_blank"><b>Unix-Socket</b></a></li><li><a href="http://suricata.readthedocs.io/en/suricata-4.0.4/rules/rule-lua-scripting.html?highlight=lua%20scripting" target="_blank"><b>Lua scripting</b></a><br></li><li><a href="http://suricata.readthedocs.io/en/suricata-4.0.4/file-extraction/md5.html?highlight=MD5" target="_blank"><b>NSS(MD5)  enabled</b></a></li><li><b>PIE - Position Independent Executable </b></li><li><b>Redis enabled support<br></b></li></ul>The Ubuntu <br><ul><li>18.04 Bionic<br></li><li>17.10 Artful</li></ul><p>distribution packages are with Hyperscan enabled by default for extra performance.<br>(Your CPU needs to have the SSSE3 flag. You can check with - cat /proc/cpuinfo)<br></p>By community request there is also <span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-m_8002342989052303038gmail-m_7597792384766568316gmail-m_889112295789798602gmail-m_6122786599867899721gmail-m_4955962140363648144gmail-m_557006789419501953gmail-m_-664065560919861124gmail-il">available</span></span> "<span><span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-il">suricata</span></span></span>-dbg" (<span><span><span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-il">Suricata</span></span></span></span> with
 enabled debug features) <span>package</span> ready to use 
out of the box install:<br>"sudo apt-get install <span><span><span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-il">suricata</span></span></span></span>-dbg".<br><br><span><span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-il">Suricata</span></span></span> <span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-il">4</span>.1 beta1<span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-il"></span></span> is <span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-m_8002342989052303038gmail-m_7597792384766568316gmail-m_889112295789798602gmail-m_6122786599867899721gmail-m_4955962140363648144gmail-m_557006789419501953gmail-m_-664065560919861124gmail-il">available</span></span> from our <b><u><span><span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-il">suricata</span></span></span>-<span>rust-experimental</span></u></b>  <span><span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-m_8002342989052303038gmail-m_7597792384766568316gmail-m_889112295789798602gmail-m_6122786599867899721gmail-m_4955962140363648144gmail-m_557006789419501953gmail-m_-664065560919861124gmail-il">PPA</span></span></span> repository.<br>


</div>More about <span><span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-il">Suricata</span></span></span> <span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-il">4</span>.1 beta1<span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-il"></span></span> features and bug fixes:  <br><a href="https://suricata-ids.org/2018/03/23/suricata-41beta1-ready-for-testing/" target="_blank">https://suricata-ids.org/2018/<wbr>03/23/suricata-41beta1-ready-f<wbr>or-testing/</a><br><br>How to:<br><a href="https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Ubuntu_Installation_-_Personal_Package_Archives_%28PPA%29" target="_blank">https://redmine.openinfosecfou<wbr>ndation.org/projects/<span><span><span><span><span class="gmail-m_-30925208005915785m_-8075134089854018946gmail-il">suricata</span></span></span></span></span>/<wbr>wiki/Ubuntu_Installation_-_Per<wbr>sonal_Package_Archives_%28PPA%<wbr>29</a><div class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-yj6qo gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-ajU"><div id="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-:1gn" class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-ajR"><img class="gmail-m_-30925208005915785m_-8075134089854018946gmail-m_-8321699544303221506gmail-ajT gmail-m_-30925208005915785m_-8075134089854018946gmail-CToWUd gmail-CToWUd" src="https://ssl.gstatic.com/ui/v1/icons/mail/images/cleardot.gif"></div></div>Testing and feedback is welcome!<br><br>-- <br>Regards,<br>Peter Manev<br></div>