3kfx

Hi i have the same issue, i'm using Barnyard2 with suricata. In suricata configuration file output is set like: - unified2-alert: enbaled: yes filename: unified2.alert I need help, i'm stacked...

Thank you masterob1 for your reply, i'm using suricata (not big difference with snort). for tuning it i've enabled max-pending-packets and set it to 1024. i'm now looking for session...