From mboxrd@z Thu Jan  1 00:00:00 1970
From: Stefan Schantl <stefan.schantl@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: IPFire meets Suricata - Call for tester
Date: Fri, 15 Feb 2019 08:51:44 +0100
Message-ID: <16e9e64aa0650ee00602deefc9ca9ffaa0a8f148.camel@ipfire.org>
In-Reply-To: <003a01d4c4be$2d8b4800$88a1d800$@net>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============6205771600696462472=="
List-Id: <development.lists.ipfire.org>

--===============6205771600696462472==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hello Wayne,

thanks for joining testing and sharing your feedback with this list.
> Used the download image link and loaded on my test box, noticed a few
> issues with it. =20
>=20
> -When Intrusion monitoring is enabled on red interface all traffic to
> red stops with empty IDS log.

Indeed this is not an expected behavior. Please provide some more
details about the used version (did you updated the ISO-release with
the tarball-based RC1 release? ) configuration etc. to figure out what
happened here.=20

> -Intrusion detection Seems to be limited to one rules list source at
> a time. Maybe feature of Suricata?

This works as designed, only one Ruleset-Vendor at the same time can be
used.

> -Under "status" tab, any graphic trend display fails to load with
> "contains errors"

This take some time to collect data and generate the graphs. Please be
patient, if after one day still no graphs a generated please report
back.

Best regards,

-Stefan

>=20
> Regards
> Wayne
>=20
> -----Original Message-----
> From: Development [mailto:development-bounces(a)lists.ipfire.org] On
> Behalf Of Stefan Schantl
> Sent: Thursday, February 14, 2019 8:29 AM
> To: development(a)lists.ipfire.org
> Subject: Re: IPFire meets Suricata - Call for tester
>=20
> Hello list,
>=20
> suricata development goes on, so I'm happy to announce the first
> release candidate on this list.
>=20
> The biggest difference to any previous versions is, this time an
> update tarball for any IPFire installations is available. So anybody
> now easily can download and install it on an existing system without
> doing a fresh installation.
>=20
> The tarball (currently only x86_64) can be grabbed from here:
>=20
> https://people.ipfire.org/~stevee/suricata/
>=20
> To start testing download the tarball and place it on your IPFire
> system. Extract the tarball and launch the install (install.sh)
> script.
>=20
> During installation snort will be stopped (if running), new files
> will be placed on the system, your taken snort settings will be
> converted to get used by suricata and finally suricata will be
> started (if snort was used before) to start protecting the configured
> networks.
>=20
> If you prefer a fresh installation, the latest image can be grabbed
> from here:
>=20
> https://nightly.ipfire.org/next-suricata/latest/x86_64/
>=20
> Direct link for downloading the ISO image:
>=20
> https://nightly.ipfire.org/next-suricata/latest/x86_64/ipfire-2.21.x86_64-f=
ull-core128.iso
>=20
> Thanks for downloading and testing. There are no known bugs so far,
> as usual please file any bugs to our bugtracker (
> https://bugzilla.ipfire.org) and share your feedback on the list.
>=20
> Best regards,
>=20
> -Stefan
>=20

--===============6205771600696462472==
Content-Type: application/pgp-signature
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="signature.asc"
MIME-Version: 1.0

LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KCmlRSXpCQUFCQ2dBZEZpRUVXTzBOWHRTcnZo
YXN5dERuVHRkT0ZZK1RzdDRGQWx4bWI1QUFDZ2tRVHRkT0ZZK1QKc3Q2ek53Ly9YY21oYjE2djdS
dnZtQ0ViR0s4aHlBcVpyMHN5N3FGZHlVT0R5L0wwaGdoS3F3dHpUQTNKMW1iYgpIcFpMT1p3WHdu
cE9WYTlIdDNyWkxIVlZNaUNiODQ0cjNjM2M5amM5TmMrcFhMN0JyL1Fnb1A2bStOOFQ5Q3U3Cldz
dERDK0I0ZEhLd2E4aS8zMmpRSE43VmEvaUc0UVpVZWRzRmQ2Mjl3L2RwN1VyaU9FRzY5Mmw5aTBu
WEVYODEKNGhaMU8wTTB6QWpNRlE5Q3hqS0oyY1M2a2lwaE84QUdUaEEzS0I1TU03SDRsTFBRRTZ4
V2tEZmV3dmRqZUZhdAptVWduV2J1WXFkL2lHVXBEZ0VOdE1hQSs5N2Z3bTBvMDRyaWVmYnFoTHdY
dmlYVWs5T2pJaEpWbEE5djcwbDMvCllhYkk5L21SQjFNajRkbTBVK0dsTlJ0dC9ZVkRsYVBXaFhG
VmdTL014Q09EaXhqbjZXbWp5U1JOK2RBMG13c1cKbE5IN1AyVkNCeFZwZURSOWZLNE84VTNyU09E
WEhrUHNLRjhKd1ZrTHdPWHBHcUNmdWxETE5xakFzby9mR01OSQp0RGJnNzRRUVQvVDRBWkY1am5F
SFd3QmRQV1pRbld5b0FZZjBFdEtXMmJIV2FUZ0dIZyszTUpXUlR3TXlDYUJ3Ckx3aTIwNkNVT21R
QlhkRy9KS09Ma2RtZkQ5QzZsbm5VRm12MEkzUXNCcDJpMEVCajl3MUYvUTNDRVF5akN5OFcKWmhN
RlMvM1B4dllPb0VwZEUzMUZXRy9EbWp5dzhuM1hGZG5QQk81dlFWenJPbk0zeHJWSytjY1pxakVX
WXErbgo2QzVpc2ZDUjREL2ozd2thbFZHMko5Um4ybit0VjNTMkw0OGU4Nm95N0ZPTVNVWUVRM3M9
Cj00Vjg2Ci0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQo=

--===============6205771600696462472==--