Console output?

1

Topic…would be nice for testing to run suricata and have the results just output to the current console.

2

As a quick hack you could set the filename in the logger to /dev/stdout.

3

Hi again Jason…I figured I’d get something along those lines as a response :wink: So…feature request then…snort has this, so should suricata. Thank you!

4

What do you expect to see?

5

Hopefully the same type of thing you see with snort using -A cmg:

    04/30-09:58:53.580614 [**] [1:1000053:0] "Ping test" [**] [Classification: Potentially Bad Traffic] [Priority: 2] {ICMP} 192.168.1.9 -> 192.168.1.13
   type:0x800 len:0x62
    192.168.1.9 -> 192.168.1.13 ICMP TTL:64 TOS:0x0 ID:7548 IpLen:20 DgmLen:84 DF
    Type:8  Code:0  ID:12542   Seq:1  ECHO

    snort.raw[56]:
    - - - - - - - - - - - -  - - - - - - - - - - - -  - - - - - - - - -
    snip
    20 21 22 23 24 25 26 27  28 29 2A 2B 2C 2D 2E 2F   !"#$%&' ()*+,-./
    30 31 32 33 34 35 36 37                           01234567 
    - - - - - - - - - - - -  - - - - - - - - - - - -  - - - - - - - - -
6

Might be a nice plugin use case?