From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4cnhrD6wZ5z32nP for ; Thu, 16 Oct 2025 22:06:52 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R13" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4cnhr94gKYz2xSM for ; Thu, 16 Oct 2025 22:06:49 +0000 (UTC) Received: from layka.disroot.org (layka.disroot.org [178.21.23.139]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPS id 4cnhr86VjCz3W for ; Thu, 16 Oct 2025 22:06:48 +0000 (UTC) Authentication-Results: mail01.ipfire.org; dkim=pass header.d=disroot.org header.s=mail header.b=MJfuvpOH; dmarc=pass (policy=reject) header.from=disroot.org; spf=pass (mail01.ipfire.org: domain of robin.roevens@disroot.org designates 178.21.23.139 as permitted sender) smtp.mailfrom=robin.roevens@disroot.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=lists.ipfire.org; s=202003rsa; t=1760652408; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=CeaB+hx4xVWgWvcomK400nkMrNedKT6++ZQKKCKJF+8=; b=oNP90bEVuvtHwCnhnAA3kSIftoBBDmU1FVgR8/RUTokRKBmkl6/4b65nsHSx5p+48seuJ2 WFyLe7enaR55JVc6y48gKAYiiEfUsDv2+XRDCPQpI9UEF6vk937y0R1FVCCN2FkuvsP0qo B4obzfviAnhF1F4f0dKaxscehMc+Fa0kwh5A3RrB+NayD5PgGC88gk4u/b2qThTDFc4lOZ WhIuWDzkhbTRXqmOOrkQi97n0XO3u1H9b8gF0IWJN7J/OAD/oG4ZfwFPpWAccbT9rx8gGw Lh0m29kys60/W1H94yiV7lldf454ZQIPjlwTDTpRideGvb6MFco2El1sZn62mg== ARC-Authentication-Results: i=1; mail01.ipfire.org; dkim=pass header.d=disroot.org header.s=mail header.b=MJfuvpOH; dmarc=pass (policy=reject) header.from=disroot.org; spf=pass (mail01.ipfire.org: domain of robin.roevens@disroot.org designates 178.21.23.139 as permitted sender) smtp.mailfrom=robin.roevens@disroot.org ARC-Seal: i=1; s=202003rsa; d=lists.ipfire.org; t=1760652408; a=rsa-sha256; cv=none; b=ALim7Bx0Dd1z+VPDIVP7e896o2o5nXTNjvO/1jfDjBMF3zeipGBZTgZYeaBZhkl/uCl6YF twAXM6fddqcH8yjA04QBJQbq1v93fz2piFNsuM2E+LAvOkDtLS12VekSgSv+CGFfTP3YmC fX2bm3Pdsq3JIlDrH7A4PwAXxm8ezai8wW8rD8yNW/IPKa7lx4YakrfquI7VsebYfhjgKR FwA+S//GzZBB/uq/7wO1vOvR4IsT7wy/DFLTPXh1MPcS8qfgqMbitkVGVfxpEfLJ7tbGFW vc6F2DDEA9HvSyehsJSGL3iJtje03SBX8W/O+z0MxY1cfjFizxZCD1D0L0Ca5g== Received: from mail01.disroot.lan (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 5E96F25DD5 for ; Fri, 17 Oct 2025 00:06:48 +0200 (CEST) X-Virus-Scanned: SPAM Filter at disroot.org Received: from layka.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavis, port 10024) with ESMTP id xcyuhoDBIKq1 for ; Fri, 17 Oct 2025 00:06:47 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1760652407; bh=CeaB+hx4xVWgWvcomK400nkMrNedKT6++ZQKKCKJF+8=; h=Subject:From:To:Date:In-Reply-To:References; b=MJfuvpOHZh2270CvzHhxwsNIxp0LHY8b0J+/5V2iH6Sb9Nrh50BoQ0SzfPiseER3e KEke0faJ4ghX83QejAMOZJ2jf0RdmyIwhh3Z/3A7Pp5Kh369DJ62qoDYI9P4cJ7TUi 4kOqV8PgMwyTDs8uuImriP2oKAisKyYSwsCacpbtk1ZEB6eQcW+JNAf+raUUkArmCB 5uQBX3pJ3Cvcsf5BuJdNZIMdw5fnlbCB1ceTu9bpw4aQQGzImej5whytEbHS6wcelN V1+C1FU5xc4zuzfGjSAFmkbDnuup9A0+lRzOiSquKAo7NZtaaGg3a7yv5Sbvr7oegC g2UrVeBScnzqA== Received: from chojin.roevenslambrechts.be (Chojin.roevenslambrechts.be [192.168.0.50]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (no client certificate requested) (Authenticated sender) by hachiman (MailScanner Milter) with SMTP id 2BA2440D1F5 for ; Fri, 17 Oct 2025 00:06:40 +0200 (CEST) Message-ID: <86fb9e7a0f3ec6218119c09dfda0651b57891014.camel@disroot.org> Subject: Re: Zabbix support for suricata-reporter From: Robin Roevens To: development@lists.ipfire.org Date: Fri, 17 Oct 2025 00:06:39 +0200 In-Reply-To: <042b33aa-eb99-4cfb-9be1-3a948ceee4ff@ipfire.org> References: <56ad0ff847bb0b5b5808084321ac52efd63cd16f.camel@disroot.org> <708978AA-034A-4533-BF40-257A843AFF8E@ipfire.org> <042b33aa-eb99-4cfb-9be1-3a948ceee4ff@ipfire.org> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.56.2 Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 X-RoevensLambrechts-MailScanner-ID: 2BA2440D1F5.A2ACD X-RoevensLambrechts-MailScanner: Found to be clean X-RoevensLambrechts-MailScanner-From: robin.roevens@disroot.org X-RoevensLambrechts-MailScanner-Watermark: 1761257201.88256@CoTZIS0+pQIvszFxf6cCdw X-Rspamd-Queue-Id: 4cnhr86VjCz3W X-Spamd-Result: default: False [-2.98 / 11.00]; BAYES_HAM(-3.00)[99.99%]; SPF_REPUTATION_SPAM(1.66)[0.55426134474182]; NEURAL_HAM(-0.63)[-0.630]; DMARC_POLICY_ALLOW(-0.50)[disroot.org,reject]; R_DKIM_ALLOW(-0.20)[disroot.org:s=mail]; R_SPF_ALLOW(-0.20)[+a:c]; MIME_GOOD(-0.10)[text/plain]; MX_GOOD(-0.01)[]; IP_REPUTATION_HAM(-0.01)[asn: 50673(0.00), country: NL(-0.01), ip: 178.21.23.139(0.00)]; DKIM_REPUTATION(0.00)[0]; FUZZY_RATELIMITED(0.00)[rspamd.com]; ASN(0.00)[asn:50673, ipnet:178.21.23.0/24, country:NL]; RCPT_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+]; ARC_NA(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; ARC_SIGNED(0.00)[lists.ipfire.org:s=202003rsa:i=1]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[development@lists.ipfire.org]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; DKIM_TRACE(0.00)[disroot.org:+] X-Rspamd-Action: no action X-Rspamd-Server: mail01.haj.ipfire.org Hi Adolf Adolf Belka schreef op za 04-10-2025 om 13:41 [+0200]: >=20 > I can help by submitting a patch to enable the unix-socket in the > build and uncomment the suricatasc package. This was added in with > the 8.0.0 release but initially I just commented it out as we hadn't > used it before. It could always be uncommented later on as it will > now be. >=20 > I am doing a range of patch update submission work so I can add that > easily enough into what I am doing. Perfect. Then please enable it. The tool also requires the unix-command socket to be enabled in suricata config (https://docs.suricata.io/en/latest/unix-socket.html#interacting-via-unix-s= ocket) Can you enable that too in the same go? >=20 > Regards, >=20 > Adolf. >=20 >=20 >=20 Regards Robin --=20 Dit bericht is gescanned op virussen en andere gevaarlijke inhoud door MailScanner en lijkt schoon te zijn.