From 0c1425f8febc1d2d63f6c1fd44eaca61ac6e6745 Mon Sep 17 00:00:00 2001 From: John Audia Date: Sun, 18 Dec 2022 09:18:42 -0500 Subject: [PATCH] snort3: minor tweaks to local.lua * Use Boolean true for enable inline mode which is more intuitive that older '' * Add skeleton section for openappid since it has been merged[1] 1. https://github.com/openwrt/packages/commit/2d4e7d5fd343652d0852337184d56522ef5af83d Signed-off-by: John Audia --- net/snort3/files/local.lua | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/net/snort3/files/local.lua b/net/snort3/files/local.lua index 7929388ba..c48ffd0c8 100644 --- a/net/snort3/files/local.lua +++ b/net/snort3/files/local.lua @@ -2,7 +2,7 @@ -- switch tap to inline in ips and uncomment the below to run snort in inline mode --snort = {} ---snort["-Q"] = '' +--snort["-Q"] = true ips = { mode = tap, @@ -50,3 +50,10 @@ file_policy = { } } } + +-- To use openappid with snort, install the openappid package and uncomment the below +--appid = { +-- app_detector_dir = '/usr/lib/openappid', +-- log_stats = true, +-- app_stats_period = 60, +--}