Jason Ish

scripts: helper script to install dependencies - v1

2

Just trying an idea to help bootstrap a development environment. A script, install-deps.sh that knows how to install dependencies on a handful of common distributions. It currently handle Debian, Ubuntu...

- misc: fix (more) escape warnings in re patterns - https://github.com/OISF/suricata-update/pull/335 - https://github.com/OISF/suricata-update/pull/334

- index: embed pretty printed version of index - index: update embedded index

Don't enable any rulesets by default

2

By default, the `et/open` and `oisf/trafficid` rulesets are enabled by default. This was probably due to personal preference when first creating the container, but at most, `et/open` should be enabled,...

### Discussed in https://github.com/jasonish/evebox/discussions/298 Originally posted by **jianvector** March 14, 2024 If sensorname filter drop-down menu could be added, it would be a very good thing 

If a `suricata` does not exist but the group does, the user creation will fail.

lua: always available, vendored and sandboxed - v3

5

Combines the following PRs: - https://github.com/OISF/suricata/pull/10854 - https://github.com/OISF/suricata/pull/10811 Still a draft, as I think there is still some renaming and clarification in the sandboxing to be resolved.

[draft] pcap-file: unify decode and receive modules

3

Pulled out my lib branch as it'll be easier to review on its own. In pcap-file, pull the decode into the receive module.

libsuricata: library capture mode - v2

7

Library run mode. Allows library user to provide packets. Based on https://github.com/OISF/suricata/pull/10769. Mainly breakout the example into its own to keep one very simple.

jsonbuilder: use serde_json to validate json - v2

2

Builds on https://github.com/OISF/suricata/pull/10774. Introduce serde_json as a dev dependency to validate our generated JSON.