[Oisf-users] [Question] suricata test with pcap-file

Andreas Herz andi at geekosphere.org
Mon Jan 9 21:03:08 UTC 2017


On 09/01/17 at 13:07, Francis Trudeau wrote:
> 2.0.11 is pretty old now.  Current is 3.2.  I would upgrade and see if that
> helps.

Update to the most recent version is recommended. And it would be
helpful if you could narrow it down to some small parts of a .pcap where
you get different results with the alerts so we can reproduce it.

Also be more verbose about your setup and how you run suricata

-- 
Andreas Herz



More information about the Oisf-users mailing list