-
Notifications
You must be signed in to change notification settings - Fork 285
Initial Setup Suricata IDPS
Peter Manev edited this page Apr 16, 2019
·
8 revisions
NOTE All this is already taken care of during the first time install. However if you need to rerun the set up just due to change of the sniffing interface you could follow the instructions below.
Also you need to set up Suricata to listen/sniff traffic on the correct/desired interface. For that you can double click on the desktop icon Setup-IDS-Interface
or run the setup script on the command line :
root@SELKS:/home/selks-user# selks-setup-ids-interface ### Setting up sniffing interface ### Please supply a network interface(s) to set up SELKS Suricata IDPS thread detection on 0: enp0s3 1: lo Please type in interface or space delimited interfaces below and hit "Enter". Example: eth1 OR Example: eth1 eth2 eth3 Configure threat detection for INTERFACE(S):
When prompted - enter the interface name you would like to use for sniffing.
Done.