efahl
May 20, 2023, 10:38pm
2
I've been waiting for rust support to become solid enough that we can build Suricata. Then we can pit it against snort in a death match, one left standing.
Anyone want to test for me? Must build from source. This will, at some point, error.. I'll promise it now (rust will do it until I get more testers). I would suggest building outside of your main buildroot.
This requires a decent piece of kit. Running the Emerging-Threats Open and built-in rules, it has a massive RAM footprint on my device.
21556 root 486m S {Suricata-Main} suricata -c /etc/suricata/suricata.yaml -i eth0 -v -D
I do not have an init.d script for it yet - there is nā¦