[Oisf-users] Two questions about using suricata as IPS in production environments

Andreas Herz andi at geekosphere.org
Fri Jan 23 11:59:50 UTC 2015


On 23/01/15 at 11:55, C. L. Martinez wrote:
> On Fri, Jan 23, 2015 at 11:22 AM, Andreas Herz <andi at geekosphere.org> wrote:
> > I thought you were just refering to the feature for IPS mode to let the
> > flow going even when suricata crashes/quits.
> 
> Sure. But, if I am not wrong, if I configure a bridge at SO level, it
> is not need to deploy a script to watch suricata process .. Right?

I don't understand what you mean with this in detail.

-- 
Andreas Herz



More information about the Oisf-users mailing list