deepblue/mikrocata2selks
1
0
Fork 0
mirror of https://github.com/angolo40/mikrocata2selks.git synced 2025-05-12 08:27:22 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update README.md

Browse Source 
updated readme
This commit is contained in:
Giuseppe 2024-02-02 13:32:55 +01:00 committed by GitHub
parent 5ffbe329d0
commit 1cd0558657
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
README.md
View File

@ -6,7 +6,7 @@
</a> </a>
</p> </p>
> Script for auto-install Selks and mikrocata on Debian 11 > Script for auto-install Selks and mikrocata on Debian 12
## Introduction ## Introduction
This repo intend to semplify installation of IDS/IPS Suricata for packet analyzing coming from Mikrotik. This repo intend to semplify installation of IDS/IPS Suricata for packet analyzing coming from Mikrotik.
It uses latest docker repo from SELKS (Suricata, ELK Stack) and mikrocata. It uses latest docker repo from SELKS (Suricata, ELK Stack) and mikrocata.
@ -66,6 +66,9 @@ Add Mikrotik User
- Install TZSP interface - Install TZSP interface
- Notification over Telegram when ip is blocked - Notification over Telegram when ip is blocked
## Changelog 2.2
- migrated compatibility to debian 12
## Changelog 2.1 ## Changelog 2.1
- now mikrotcata read alerts from default suricata eve.json instead of create a new one - now mikrotcata read alerts from default suricata eve.json instead of create a new one
- rewrited read_json function for better stability (thanks to bekhzad-khamidullaev) - rewrited read_json function for better stability (thanks to bekhzad-khamidullaev)
@ -80,7 +83,14 @@ tcpdump -i tzsp0
systemctl status mikrocataTZSP0.service systemctl status mikrocataTZSP0.service
systemctl status TZSPreplay37008@tzsp0.service systemctl status TZSPreplay37008@tzsp0.service
``` ```
- Check if suricata docker is up and running
```sh
docker logs -f suricata
```
## Notes
- default account of SELKS:
- - Username: selks-user
- Password: selks-user
## Author ## Author