The suricata command code is as follows:
http pcap package details：
eve log output: （An error occurred in the http protocol field）
Eve-log related configuration is as follows（Only alert configuration）:
pcap file:
echo可疑命令执行#19.pcap (1.5 KB)