Capture packets on a remote interface

[suricatalfon]

Hi,

Let’s see if it serves as a clue

Suricata remote sensor

-Remote: Windows 7/10. -Locar: Ubuntu 18.04 -SSH into VPN ssh windump@192.168.1.29 -p2223 ‘C:/tmp/WinDump.exe -i1 -s0 -U -w - icmp and not port 2223’ | sed ‘1d’ | stdbuf -oL tcpdump -nn -r - -w - | stdbuf -oL suricata -knone -c /etc/suricata/suricata_no_dataset.yaml -l ./ -r /dev/stdin -l ./win7_su_log [Captura de pantalla de 2020-03-27 12-30-08] Best regards,