<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!-- p { margin-top: 0px; margin-bottom: 0px; }--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>We have been testing suricata on the raspberry 4 with 4 gigs of ram and with the wazuh agent we are able to<br>
</p>
<p>get alerts into our wazuh cluster. in other deployments we have chosen to use PCAP mode instead of AF-packet but we can't seem to get<br>
</p>
<p>it on the PI to change. we are running on 2019-09-26-raspbian-buster-full.<br>
</p>
<p><br>
</p>
<p><br>
</p>
<p><br>
</p>
<div id="Signature">
<div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
<p class="MsoNormal" style="font-family:Calibri,sans-serif; margin:0in 0in 0.0001pt; font-size:11pt; color:rgb(33,33,33); background-color:rgb(255,255,255)">
<span style="font-size:10pt; color:rgb(31,73,125)">Matthew Dunlop</span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt; background-color:rgb(255,255,255)">
<span style="color:rgb(31,73,125); font-family:Calibri,sans-serif; font-size:10pt">Cyber Security A</span><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:13.3333px">nalyst</span></font></p>
<p class="MsoNormal" style="font-family:Calibri,sans-serif; margin:0in 0in 0.0001pt; font-size:11pt; color:rgb(33,33,33); background-color:rgb(255,255,255)">
<span style="font-size:10pt; color:rgb(31,73,125)">Cohere Communications | 845 Third Avenue / 16th floor | New York, NY 10022 | P (212) 400-4804 | </span></p>
<p class="MsoNormal" style="font-family:Calibri,sans-serif; margin:0in 0in 0.0001pt; font-size:11pt; color:rgb(33,33,33); background-color:rgb(255,255,255)">
<span style="font-size:10pt; color:rgb(31,73,125)"><br>
</span><a tabindex="0" href="http://www.coherecomm.com/" target="_blank" id="NoLP"><span style="font-size:10pt; color:blue">www.coherecomm.com<br>
</span></a><b><span style="font-size:10pt; color:rgb(31,73,125)">Precisely Engineered. Thoroughly Supported. Unquestionably Guaranteed.</span></b></p>
<p class="MsoNormal" style="font-family:Calibri,sans-serif; margin:0in 0in 0.0001pt; font-size:11pt; color:rgb(33,33,33); background-color:rgb(255,255,255)">
<b><span style="font-size:10pt; color:rgb(31,73,125)"> </span></b></p>
<p class="MsoNormal" style="font-family:Calibri,sans-serif; margin:0in 0in 0.0001pt; font-size:11pt; color:rgb(33,33,33); background-color:rgb(255,255,255)">
<span style="font-size:10pt; color:rgb(31,73,125)">Cohere distinguishes itself with more than just offering the latest technologies, but as a trusted IT partner. We work closely with our clients to tailor solutions to meet their specific business challenges.
From the precise engineering of our supported technologies to the experience of our support staff; Cohere is built to address the most demanding of needs. We look forward to exceeding our clients’ expectations.</span></p>
</div>
</div>
</body>
</html>