Suricata not recognising packets, but tshark does

Help
40

Thanks. I got 5.0.3 installed. For completeness, here is what I did:

Added:

deb http://httpredir.debian.org/debian buster-backports main contrib

to /etc/apt/sources.list.

I then had to do:

gpg --recv-keys 04EE7237B7D453EC
gpg --recv-keys 648ACFD622F3D138

gpg --export 04EE7237B7D453EC | sudo apt-key add -
gpg --export 648ACFD622F3D138 | sudo apt-key add -

Then manually download and install libbpf:

curl -OL http://security.debian.org/debian-security/pool/updates/main/l/linux/libbpf4.19_4.19.118-2+deb10u1_armhf.deb
dpkg -i libbpf4.19_4.19.118-2+deb10u1_armhf.deb

Now Suricata successfully installed:

apt -t buster-backports suricata
1 Like