[Oisf-users] Suricata and IP Reputation

Andreas Herz andi at geekosphere.org
Tue May 30 19:27:58 UTC 2017


On 21/05/17 at 15:31, Stanford Prescott wrote:
> Also a related question...when I attempt to add and IP based rule file such
> as the ET compromised.rules to use with Suricata, I get error messages for
> all the rules in compromised.rules saying they are duplicate signatures. Do
> I not have something configured correctly to use those ip based rules?

Well looks like you have included them more then once, can you share the
config where you define what rule files to use?

-- 
Andreas Herz



More information about the Oisf-users mailing list