[Oisf-users] Empty http.log file

Victor Julien victor at inliniac.net
Tue Jul 10 14:55:02 UTC 2012

On 07/10/2012 04:43 PM, kay wrote:
> Dear Victor,
> When I set 1/1 mark for repeat mode whole traffic comes through the
> "iptables -A INPUT -p tcp -m mark --mark 0x1/0x1 -m tcp --dport 80 -j
> ACCEPT" rule. That does not make any sense for "mark" feature...

I think the first problem you need to solve is that of getting packets
into Suricata. Then move on from there. It's clear that because of the
warnings you got the rules or suricata settings were misconfigured.

Victor Julien
PGP: http://www.inliniac.net/victorjulien.asc

More information about the Oisf-users mailing list