[Oisf-users] Starting multiple filters both

info Zarafa info at zarafa.tv
Fri May 23 07:20:54 UTC 2014


Hello 
I use snorby to view incoming connections. 
If I turn to the next opposed any intrusion command: 
Suricata-c / etc / Suricata / suricata.yaml-q 0-D 
I do not see you in there if snorby to intrusion or not. 
Exist'il another way of knowing countered intrusions see what happens in snorby? 
Thank you for your help 
Michel


Le 21 mai 2014 à 17:37, Victor Julien <lists at inliniac.net> a écrit :

> On 05/19/2014 02:33 PM, info Zarafa wrote:
>> Is it possible to start multiple filters at once? 
>> 
>> Such as: 
>> 
>> Suricata -c /etc/suricata/suricata.yaml -i eth 0 -q 0-D 
>> 
> 
> No. You can have multiple -i options, and multiple -q options, but
> mixing different capture types is not supported.
> 
> -- 
> ---------------------------------------------
> Victor Julien
> http://www.inliniac.net/
> PGP: http://www.inliniac.net/victorjulien.asc
> ---------------------------------------------
> 
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/




More information about the Oisf-users mailing list