Project

General

Profile

Actions

Feature #419

closed

add all options/switches available of Suri to command line

Added by Peter Manev almost 13 years ago. Updated about 12 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

"--list-keywords"
"--list-proro" (or whiever it is)
"--build-info" - these guys are not there - if you don't know them, you will never find them.

currently it( #suricata , followed by "enter") displays only these:
PlatformTesting/misc# suricata
[1989] 3/3/2012 -- 07:45:11 - (suricata.c:1126) <Info> (main) -- This is Suricata version 1.3dev (rev 2f7717a)
[1989] 3/3/2012 -- 07:45:11 - (util-cpu.c:171) <Info> (UtilCpuPrintSummary) -- CPUs/cores online: 1
[1989] 3/3/2012 -- 07:45:11 - (suricata.c:1183) <Error> (main) -- [ERRCODE: SC_ERR_OPENING_FILE(40)] - Configuration file has not been provided
Suricata 1.3dev (rev 2f7717a)
USAGE: suricata

-c &lt;path&gt;                    : path to configuration file
-i &lt;dev or ip&gt; : run in pcap live mode
-F &lt;bpf filter file&gt; : bpf filter file
-r &lt;path&gt; : run in pcap file/offline mode
-s &lt;path&gt; : path to signature file loaded in addition to suricata.yaml settings (optional)
-S &lt;path&gt; : path to signature file loaded exclusively (optional)
-l &lt;dir&gt; : default log directory
-D : run as daemon
--list-runmodes : list supported runmodes
--runmode &lt;runmode_id&gt; : specific runmode modification the engine should run. The argument
supplied should be the id for the runmode obtained by running
--list-runmodes
--engine-analysis : print reports on analysis of different sections in the engine and exit.
Please have a look at the conf parameter engine-analysis on what reports
can be printed
--pidfile &lt;file&gt; : write pid to this file (only for daemon mode)
--init-errors-fatal : enable fatal failure on signature init error
--dump-config : show the running configuration
--pcap[=&lt;dev&gt;] : run in pcap mode, no value select interfaces from suricata.yaml
--pcap-buffer-size : size of the pcap buffer value from 0 - 2147483647
--user &lt;user&gt; : run suricata as this user after init
--group &lt;group&gt; : run suricata as this group after init
--erf-in &lt;path&gt; : process an ERF file

To run the engine with default configuration on interface eth0 with signature file "signatures.rules", run the command as:

suricata -c suricata.yaml -s signatures.rules -i eth0

Actions

Also available in: Atom PDF