Enabling Rule Profiling in Suricata - Compiling from Source
Writing Suricata rules or need to find expensive ones? Enabling rule profiling can help! Suricata can provide insight into how a rule is performing and help you isolate those that may be having a disproportionate impact on your Suricata server. Also, as a rule writer, this can help you identify inefficient patterns in how you are creating your rules. In this video, we'll compile Suricata from source to enable rule profiling and test our built using offline mode to ensure performance data is being generated.
Join this channel to get access to perks:
/ @jstrosch
Clean Up/Permissions Fix
sudo groupadd suricata
sudo chgrp -R suricata /etc/suricata
sudo chgrp -R suricata /var/lib/suricata/rules
sudo chgrp -R suricata /var/lib/suricata/update
sudo chmod -R g+r /etc/suricata/
sudo chmod -R g+rw /var/lib/suricata/rules
sudo chmod -R g+rw /var/lib/suricata/update
note, this requires a system reboot to take affect
sudo usermod -a -G suricata remnux
Cybersecurity, reverse engineering, malware analysis and ethical hacking content!
🎓 Courses on Pluralsight 👉🏻 https://www.pluralsight.com/authors/j...
🌶️ YouTube 👉🏻 Like, Comment & Subscribe!
🙏🏻 Support my work 👉🏻 / joshstroschein
🌎 Follow me 👉🏻 / jstrosch , / joshstroschein
⚙️ Tinker with me on Github 👉🏻 https://github.com/jstrosch
🤝 Join the Discord community and more 👉🏻 https://www.thecyberyeti.com