I am new using Suricata and I need help resolving the problem below. I was following Enhancing Your Cuckoo Sandbox with Suricata webinar and I ran into this problem below:
I ran the following command to run suricata in socket mode
sudo suricata -c /etc/suricata/suricata.yaml -k none --runmode=autofp --user=cuckoo–unix-socket -vvv
and I got the following messege:
“To run the engine with default configuration on interface eth0 with signature file “signatures.rules”, run the command as:
suricata -c suricata.yaml -s signatures.rules -i eth0”
I changed eth0 in the suricata.yaml file to my system interface name, I ran the command “suricata -c suricata.yaml -s signatures.rules -i eth0” and got the error message below:
[ERRCODE: SC_ERR_NO_RULES(42)] - No rule files match the pattern signatures.rules
6/5/2021 – 15:16:31 - - all 32 packet processing threads, 4 management threads initialized, engine started.
I hope someone will be able to help me out.