[Oisf-users] [Osif-users] suricata 4.0.5 af-packet mode not bridging packet

Davide Setti d.setti at certego.net
Tue Oct 30 08:03:03 UTC 2018


Hi Kavi,
could you please share your configuration on suricata.yaml and the output
in suricata.log?

We have about 100 instances running on docker (netmode HOST and NET_ADMIN
capability) in IDS mode, and never had any problem like this.

Regards,
Davide

Il giorno mar 30 ott 2018 alle ore 08:31 kavi perumal <
kaviperumal22 at gmail.com> ha scritto:

> Hi Davide,
>
> tried with --cap-add option with tap (IDS) mode, still it was not working.
>
> regards
> -Kavi Perumal G.
>

-- 
<http://www.certego.net/>
Davide Setti
R&D and Incident Response Team, Certego
<http://www.linkedin.com/company/certego>  <http://twitter.com/Certego_IRT>
<http://github.com/certego>  <http://www.youtube.com/CERTEGOsrl>
<http://plus.google.com/117641917176532015312>
Use of the information within this document constitutes acceptance for use
in an "as is" condition. There are no warranties with regard to this
information; Certego has verified the data as thoroughly as possible. Any
use of this information lies within the user's responsibility. In no event
shall Certego be liable for any consequences or damages, including direct,
indirect, incidental, consequential, loss of business profits or special
damages, arising out of or in connection with the use or spread of this
information.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20181030/bb9d51a3/attachment-0001.html>


More information about the Oisf-users mailing list