lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-18 02:25:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

intrusion detection: log drops and alerts causing them

Browse Source
This commit is contained in:
Franco Fichtner 2018-01-20 12:17:04 +01:00
parent 5e970ddf87
commit 573612d48e
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/opnsense/service/templates/OPNsense/IDS/suricata.yaml
View File

@ -117,7 +117,10 @@ outputs:
# - files:
# force-magic: no # force logging magic on all logged files
# force-md5: no # force logging of md5 checksums
# #- drop
- drop:
alerts: yes # log alerts that caused drops
flows: start # start or all: 'start' logs only a single drop
# per flow direction. All logs each dropped pkt.
# - ssh
# alert output for use with Barnyard2