Feature #419
closedadd all options/switches available of Suri to command line
Description
"--list-keywords"
"--list-proro" (or whiever it is)
"--build-info" - these guys are not there - if you don't know them, you will never find them.
currently it( #suricata , followed by "enter") displays only these:
PlatformTesting/misc# suricata
[1989] 3/3/2012 -- 07:45:11 - (suricata.c:1126) <Info> (main) -- This is Suricata version 1.3dev (rev 2f7717a)
[1989] 3/3/2012 -- 07:45:11 - (util-cpu.c:171) <Info> (UtilCpuPrintSummary) -- CPUs/cores online: 1
[1989] 3/3/2012 -- 07:45:11 - (suricata.c:1183) <Error> (main) -- [ERRCODE: SC_ERR_OPENING_FILE(40)] - Configuration file has not been provided
Suricata 1.3dev (rev 2f7717a)
USAGE: suricata
-c <path> : path to configuration file
-i <dev or ip> : run in pcap live mode
-F <bpf filter file> : bpf filter file
-r <path> : run in pcap file/offline mode
-s <path> : path to signature file loaded in addition to suricata.yaml settings (optional)
-S <path> : path to signature file loaded exclusively (optional)
-l <dir> : default log directory
-D : run as daemon
--list-runmodes : list supported runmodes
--runmode <runmode_id> : specific runmode modification the engine should run. The argument
supplied should be the id for the runmode obtained by running
--list-runmodes
--engine-analysis : print reports on analysis of different sections in the engine and exit.
Please have a look at the conf parameter engine-analysis on what reports
can be printed
--pidfile <file> : write pid to this file (only for daemon mode)
--init-errors-fatal : enable fatal failure on signature init error
--dump-config : show the running configuration
--pcap[=<dev>] : run in pcap mode, no value select interfaces from suricata.yaml
--pcap-buffer-size : size of the pcap buffer value from 0 - 2147483647
--user <user> : run suricata as this user after init
--group <group> : run suricata as this group after init
--erf-in <path> : process an ERF file
To run the engine with default configuration on interface eth0 with signature file "signatures.rules", run the command as:
suricata -c suricata.yaml -s signatures.rules -i eth0