[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 5b3743a80347aa83f6773c2955428a90afe65978

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 5b3743a80347aa83f6773c2955428a90afe65978

[Michael Tremer]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  5b3743a80347aa83f6773c2955428a90afe65978 (commit)
       via  0143f36711eb8f948a183459918d1fae7a65354e (commit)
      from  ec6f8b6de04c4e761d998b16e2ec16df2bfb2cef (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 5b3743a80347aa83f6773c2955428a90afe65978
Author: Michael Tremer <michael.tremer@ipfire.org>
Date:   Mon Apr 20 10:43:40 2026 +0000

    core202: Ship Suricata configuration and remove stats.log
    
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 0143f36711eb8f948a183459918d1fae7a65354e
Author: Michael Tremer <michael.tremer@ipfire.org>
Date:   Mon Apr 20 10:39:07 2026 +0000

    suricata: Disable the stats log
    
    This is generating a large amount of logs which are not worth storing at
    this point in time.
    
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 config/rootfiles/core/202/filelists/files | 1 +
 config/rootfiles/core/202/update.sh       | 3 +++
 config/suricata/suricata.yaml             | 2 +-
 3 files changed, 5 insertions(+), 1 deletion(-)

Difference in files:
diff --git a/config/rootfiles/core/202/filelists/files b/config/rootfiles/core/202/filelists/files
index 92ffde38d..1c4795ebc 100644
--- a/config/rootfiles/core/202/filelists/files
+++ b/config/rootfiles/core/202/filelists/files
@@ -1,6 +1,7 @@
 etc/rc.d/init.d/firewall
 etc/rc.d/init.d/sysklogd
 etc/rc.d/init.d/unbound
+etc/suricata/suricata.yaml
 srv/web/ipfire/cgi-bin/dnsbl.cgi
 srv/web/ipfire/cgi-bin/ids.cgi
 srv/web/ipfire/cgi-bin/ovpnmain.cgi
diff --git a/config/rootfiles/core/202/update.sh b/config/rootfiles/core/202/update.sh
index f5b77e8dd..59f13f900 100644
--- a/config/rootfiles/core/202/update.sh
+++ b/config/rootfiles/core/202/update.sh
@@ -109,6 +109,9 @@ fi
 # Reload cronjobs
 fcrontab -z
 
+# Remove Suricata's stats.log
+rm -vf /var/log/suricata/stats.log*
+
 # This update needs a reboot...
 touch /var/run/need_reboot
 
diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index e91c003e7..1027cf373 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -467,7 +467,7 @@ outputs:
 
   # Stats.log contains data from various counters of the Suricata engine.
   - stats:
-      enabled: yes
+      enabled: no
       filename: stats.log
       append: yes       # append to file (yes) or overwrite it (no)
       totals: yes       # stats for all threads merged together


hooks/post-receive
--
IPFire 2.x development tree