* [PATCH v2] suricata: Support Zabbix requirements
@ 2025-10-17 11:09 Adolf Belka
0 siblings, 0 replies; only message in thread
From: Adolf Belka @ 2025-10-17 11:09 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- The Zabbix addon will use the unix socket and also the suricatasc tool.
- Update configure to enable unix-socket
- Update rootfile to uncomment suricatasc
- This v2 version also sets the unix socket to yes in suricata.yaml
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/suricata | 2 +-
config/suricata/suricata.yaml | 2 +-
lfs/suricata | 3 ++-
3 files changed, 4 insertions(+), 3 deletions(-)
diff --git a/config/rootfiles/common/suricata b/config/rootfiles/common/suricata
index 2bfc3babd..518920abd 100644
--- a/config/rootfiles/common/suricata
+++ b/config/rootfiles/common/suricata
@@ -3,7 +3,7 @@ etc/suricata/suricata.yaml
usr/bin/suricata
usr/bin/suricata-watcher
#usr/bin/suricatactl
-#usr/bin/suricatasc
+usr/bin/suricatasc
usr/sbin/convert-ids-backend-files
#usr/share/doc/suricata
#usr/share/doc/suricata/AUTHORS
diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index 31c8d3897..dd3492eb6 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -1140,7 +1140,7 @@ runmode: workers
# activated in live capture mode. You can use the filename variable to set
# the file name of the socket.
unix-command:
- enabled: auto
+ enabled: yes
#filename: custom.socket
# Magic file. The extension .mgc is added to the value here.
diff --git a/lfs/suricata b/lfs/suricata
index e84c604c6..95403be78 100644
--- a/lfs/suricata
+++ b/lfs/suricata
@@ -83,7 +83,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
--with-libjansson-libraries=/usr/lib \
--with-libjansson-includes=/usr/include \
--disable-suricata-update \
- --enable-rust
+ --enable-rust \
+ --enable-unix-socket
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
--
2.51.0
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2025-10-17 11:09 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-10-17 11:09 [PATCH v2] suricata: Support Zabbix requirements Adolf Belka
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox