Skip to content

Instantly share code, notes, and snippets.

@Zobber
Created April 1, 2020 17:30
Show Gist options
  • Save Zobber/53ead07d3b73af9f87ad8b1abeb24359 to your computer and use it in GitHub Desktop.
Save Zobber/53ead07d3b73af9f87ad8b1abeb24359 to your computer and use it in GitHub Desktop.
## General rules
sudo suricata-update
## OISF host
sudo suricata-update update-sources
sudo suricata-update list-sources
## To enable ‘oisf/trafficid’, enter
sudo suricata-update enable-source oisf/trafficid
sudo suricata-update
Controlling which rules are used
## Default rules
/var/lib/suricata/rules/suricata.rules
## To enable rules that are disabled by default, use ‘/etc/suricata/enable.conf’
## Similarly, to disable rules use /etc/suricata/disable.conf:
sudo suricata-update
### Reload rules
kill -USR2 $(pidof suricata)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment