Problem with integration scurius to suricata

angolo40 / mikrocata2selks

Mikrotik + Selks (Suricata) + Telegram + TZSP on Debian 12

GNU General Public License v3.0

71 stars 16 forks source link

Open vitionn opened 4 months ago

vitionn commented 4 months ago

Everything works correctly only with the ET rule, which is integrated into the repository.

Any new rullset does not work. Despite many attempts to update

Perhaps it is a matter of a new SELKS update

angolo40 commented 4 months ago

Hi, could you please share me an example of your rule configuration? Also:

are the packet coming to virtual interface? tcpdump -i tzsp0
try to stop this service mikrocataTZSP0.service with systemctl stop mikrocataTZSP0.service and run python3 /usr/local/bin/mikrocataTZSP0.py Paste the logs you get.