"The next step is to copy classification.config, reference.config and suricata.yaml from the oisf directory to the /etc/suricata directory. " I would suggest replacing "osif directory" with "base build/installation directory" … Russell