Re: IPFire meets Suricata - Call for tester

[Stefan Schantl <stefan.schantl@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 2754 bytes --]

Hello Wayne,

thanks for joining testing and sharing your feedback with this list.
> Used the download image link and loaded on my test box, noticed a few
> issues with it.  
> 
> -When Intrusion monitoring is enabled on red interface all traffic to
> red stops with empty IDS log.

Indeed this is not an expected behavior. Please provide some more
details about the used version (did you updated the ISO-release with
the tarball-based RC1 release? ) configuration etc. to figure out what
happened here. 

> -Intrusion detection Seems to be limited to one rules list source at
> a time. Maybe feature of Suricata?

This works as designed, only one Ruleset-Vendor at the same time can be
used.

> -Under "status" tab, any graphic trend display fails to load with
> "contains errors"

This take some time to collect data and generate the graphs. Please be
patient, if after one day still no graphs a generated please report
back.

Best regards,

-Stefan

> 
> Regards
> Wayne
> 
> -----Original Message-----
> From: Development [mailto:development-bounces(a)lists.ipfire.org] On
> Behalf Of Stefan Schantl
> Sent: Thursday, February 14, 2019 8:29 AM
> To: development(a)lists.ipfire.org
> Subject: Re: IPFire meets Suricata - Call for tester
> 
> Hello list,
> 
> suricata development goes on, so I'm happy to announce the first
> release candidate on this list.
> 
> The biggest difference to any previous versions is, this time an
> update tarball for any IPFire installations is available. So anybody
> now easily can download and install it on an existing system without
> doing a fresh installation.
> 
> The tarball (currently only x86_64) can be grabbed from here:
> 
> https://people.ipfire.org/~stevee/suricata/
> 
> To start testing download the tarball and place it on your IPFire
> system. Extract the tarball and launch the install (install.sh)
> script.
> 
> During installation snort will be stopped (if running), new files
> will be placed on the system, your taken snort settings will be
> converted to get used by suricata and finally suricata will be
> started (if snort was used before) to start protecting the configured
> networks.
> 
> If you prefer a fresh installation, the latest image can be grabbed
> from here:
> 
> https://nightly.ipfire.org/next-suricata/latest/x86_64/
> 
> Direct link for downloading the ISO image:
> 
> https://nightly.ipfire.org/next-suricata/latest/x86_64/ipfire-2.21.x86_64-full-core128.iso
> 
> Thanks for downloading and testing. There are no known bugs so far,
> as usual please file any bugs to our bugtracker (
> https://bugzilla.ipfire.org) and share your feedback on the list.
> 
> Best regards,
> 
> -Stefan
> 

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]