[Oisf-users] suricata docker container

[erik clark]

Is it possible to get Jason Ish's docker container to build against
af_packet? We are trying to move to docker containers, and af_packet
support in the container would be very nice.

Also, I need to sniff eve.json with Splunk, but it appears that the docker
container filesystem is completely segregated. Do I need to run the splunk
forwarder inside the container somehow get the events off the container?

Does anyone have experience with Jason's container?

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20170426/fb7d2e20/attachment.html>