[Oisf-users] Configure IPS and NSM in Suricata.

[Kaushal Shriyan]

Hi Bjørn,

I do not have any specific requirement regarding NSM and i will appreciate
if you can help me understand regarding NSM feature in Suricata. How is it
configured and its use case with some examples.

Best Regards,

On Sun, Apr 7, 2019 at 10:46 PM Bjørn Ruberg <bjorn at ruberg.no> wrote:

> On 07.04.2019 17:39, Kaushal Shriyan wrote:
> > Hi Bjørn,
> >
> > NSM stands for Network Security Monitoring and if i understand it
> > correctly, its function is to monitor any malicious traffic. Please
> > correct me if i am understanding it completely wrong.
>
> No that's fine, but that is also basically what an IDS/IPS does.
>
> That is why I am wondering why you are asking about NSM in addition,
> after having configured Suricata for being an IDS/IPS. If you have any
> specific requirements from an NSM that Suricata currently doesn't offer,
> please mention them so we can help you reach your goal.
>
> --
> Bjørn
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>
> Conference: https://suricon.net
> Trainings: https://suricata-ids.org/training/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20190408/59621311/attachment.html>