[Oisf-users] running on an ARM Raspberry pi 4 with 4 gig

[Matthew Dunlop]

We have been testing suricata on the raspberry 4 with 4 gigs of ram and with the wazuh agent we are able to

get alerts into our wazuh cluster. in other deployments we have chosen to use PCAP mode instead of AF-packet but we can't seem to get

it on the PI to change. we are running on 2019-09-26-raspbian-buster-full?.



Matthew Dunlop
Cyber Security Analyst
Cohere Communications | 845 Third Avenue / 16th floor | New York, NY 10022 | P (212) 400-4804 |

www.coherecomm.com
<http://www.coherecomm.com/>Precisely Engineered. Thoroughly Supported. Unquestionably Guaranteed.

Cohere distinguishes itself with more than just offering the latest technologies, but as a trusted IT partner.  We work closely with our clients to tailor solutions to meet their specific business challenges.  From the precise engineering of our supported technologies to the experience of our support staff; Cohere is built to address the most demanding of needs.  We look forward to exceeding our clients' expectations.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20191004/15a62122/attachment.html>