gru/routeros-suricata-tzsp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

poc3

Browse Source
This commit is contained in:
Mateusz Gruszczyński
2026-08-15 23:43:58 +02:00
parent 71b6c0d86f
commit e8e5515e24
27 changed files with 861 additions and 64 deletions
Download Patch File Download Diff File Expand all files Collapse all files
routeros/04-container-import-amd64.rsc
+5
View File
@@ -8,6 +8,11 @@
/container/envs/add list=IDS_ENV key=TAP_MTU value=9000
/container/envs/add list=IDS_ENV key=SURICATA_HOME_NET value="[192.168.0.0/16,10.0.0.0/8,172.16.0.0/12]"
/container/envs/add list=IDS_ENV key=SURICATA_LOG_MAX_MB value=512
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_MODE value=blocks
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_WINDOW_SECONDS value=60
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_MEMORY_MB value=64
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_MAX_FILES value=32
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_MAX_TOTAL_MB value=512
/container/envs/add list=IDS_ENV key=MONITORED_NETWORKS value=192.168.0.0/16,10.0.0.0/8,172.16.0.0/12
/container/envs/add list=IDS_ENV key=AUTO_BLOCK value=false
/container/envs/add list=IDS_ENV key=ROUTEROS_URL value=https://172.31.255.1
routeros/04-container-import-arm.rsc
+5
View File
@@ -8,6 +8,11 @@
/container/envs/add list=IDS_ENV key=TAP_MTU value=9000
/container/envs/add list=IDS_ENV key=SURICATA_HOME_NET value="[192.168.0.0/16,10.0.0.0/8,172.16.0.0/12]"
/container/envs/add list=IDS_ENV key=SURICATA_LOG_MAX_MB value=512
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_MODE value=blocks
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_WINDOW_SECONDS value=60
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_MEMORY_MB value=64
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_MAX_FILES value=32
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_MAX_TOTAL_MB value=512
/container/envs/add list=IDS_ENV key=MONITORED_NETWORKS value=192.168.0.0/16,10.0.0.0/8,172.16.0.0/12
/container/envs/add list=IDS_ENV key=AUTO_BLOCK value=false
/container/envs/add list=IDS_ENV key=ROUTEROS_URL value=https://172.31.255.1
routeros/04-container-import-arm64.rsc
+5
View File
@@ -9,6 +9,11 @@
/container/envs/add list=IDS_ENV key=TAP_MTU value=9000
/container/envs/add list=IDS_ENV key=SURICATA_HOME_NET value="[192.168.0.0/16,10.0.0.0/8,172.16.0.0/12]"
/container/envs/add list=IDS_ENV key=SURICATA_LOG_MAX_MB value=512
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_MODE value=blocks
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_WINDOW_SECONDS value=60
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_MEMORY_MB value=64
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_MAX_FILES value=32
/container/envs/add list=IDS_ENV key=FORENSIC_PCAP_MAX_TOTAL_MB value=512
/container/envs/add list=IDS_ENV key=MONITORED_NETWORKS value=192.168.0.0/16,10.0.0.0/8,172.16.0.0/12
/container/envs/add list=IDS_ENV key=AUTO_BLOCK value=false
/container/envs/add list=IDS_ENV key=ROUTEROS_URL value=https://172.31.255.1
routeros/app-template.yml
+5
View File
@@ -15,6 +15,11 @@ services:
environment:
TZSP_PORT: "37008"
SURICATA_LOG_MAX_MB: "512"
FORENSIC_PCAP_MODE: blocks
FORENSIC_PCAP_WINDOW_SECONDS: "60"
FORENSIC_PCAP_MEMORY_MB: "64"
FORENSIC_PCAP_MAX_FILES: "32"
FORENSIC_PCAP_MAX_TOTAL_MB: "512"
TAP_NAME: suritap0
AUTO_BLOCK: "false"
MONITORED_NETWORKS: 192.168.0.0/16,10.0.0.0/8,172.16.0.0/12