Suricata

Hi,
I think this would be very nice.
What exactly do we need to do? - "it would be nice if Suricata can support Packetfence too." - what do we need to do?

Thank you

Yes, I just figured out that since Packetfence is a powerful NAC, this combined with suricata would really be impressive.

Just an update:

I intentionally reduced the IP rules to 101 and to my surprise ALL rules were loaded without any errors.

Sorry, the above update is for another issue. Please ignore it.

Some work has been done by the Packetfence project here: http://mtn.inverse.ca/branch/changes/org.packetfence.feature.suricata

Also, issue #250 was opened with Packetfence in mind. This issue should be resolved soon, so hopefully this will lead to some easier integration!

The branch mentioned by Victor should be merged in our core pretty soon. Expect Surricata support in PacketFence soon.

For those interested, this is tracked in our issue tracker here: http://www.packetfence.org/bugs/view.php?id=1141

This made me smile: "Suricata is another SNORT-like IDS coded in Python." Python, yeah right! :-D