[Oisf-users] Suricata >3.0 to sniff bumped ssl traffic from squid

Mon Sep 12 21:06:43 UTC 2016

On 12-09-16 22:47, Cooper F. Nelson wrote:
> Probably not the answer you want, but I just used the pcap capture mode
> for squid integrations.

In 3.1 -i started using af-packet by default. If older versions did work
maybe --pcap=<iface> works.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------