Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • Turris OS packages Turris OS packages
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 81
    • Issues 81
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 15
    • Merge requests 15
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Releases
  • Packages & Registries
    • Packages & Registries
    • Container Registry
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • Turris
  • Turris OS
  • Turris OS packagesTurris OS packages
  • Merge requests
  • !40

Merged
Created Jul 25, 2017 by Martin Petráček@mpetracek

Suricata: NFQUEUE, separated ET rules and pakon-dev-detect data source change

  • Overview 7
  • Commits 5
  • Changes 15

This merge requests mainly changes suricata data input method to NFQUEUE. The init/fw script is heavily inspired by pakon-guts init/fw script.

Other things include:

  • separating emergingthreat rules (their loading and updating) from suricata base package (suricata-emergingthreats-rules)
  • embedding suricata config file to package (instead of using sed in Makefile) + some fine tunning (turning bypass on, preparing include_dir to allow integrating other packages)
  • moving pakon-dev-detect to get data from suricata instead of pakon-guts (+ dropping dependency on pakon-guts).

I would like this to get merged as soon as possible to allow some testing from others. Suricata is probably not used by anyone except few developers, so these changes itself doesn't matter, but pakon-dev-detect is kind-of public (but marked as experimental), that's why I'm asking for review. I'm testing (and polishing) all these things for few days and they seem working well.

pakon-dev-detect backend changes are in related merge request turris/pakon-dev-detect!4 (merged).

Edited Aug 01, 2017 by Martin Petráček
Assignee
Assign to
Reviewer
Request review from
Time tracking
Source branch: dev-martin