Created attachment 153340 [details] patch When launching suricata, I have those 2 warnings: 22/2/2015 -- 22:53:11 - <Warning> - [ERRCODE: SC_ERR_FOPEN(44)] - Error opening file: "/usr/local/etc/suricata//threshold.config": No such file or directory 22/2/2015 -- 22:53:11 - <Warning> - [ERRCODE: SC_ERR_NOT_SUPPORTED(225)] - Eve-log support not compiled in. Reconfigure/recompile with libjansson and its development files installed to add eve-log support. So I believe there are 2 problems: 1) The sample threshold.config is not packaged 2) Eve-log support is enabled in default configuration, but disabled in default options.
Auto-assigned to maintainer koobs@FreeBSD.org
timeout???
Not quite, suricata recently released a new version. If you can include that in your patch, I can review and approve
Are you aware of the 2 weeks timeout rule?
I won't be able to get to a suricata update in the coming week. Over to you to commit Antoine, apologies for the delay.
A commit references this bug: Author: antoine Date: Mon Apr 27 16:05:53 UTC 2015 New revision: 384861 URL: https://svnweb.freebsd.org/changeset/ports/384861 Log: - Add JSON to OPTIONS_DEFAULT to match default configuration where eve-log support is enabled - Package threshold.config configuration file PR: 197937 Approved by: koobs (maintainer) Changes: head/security/suricata/Makefile head/security/suricata/pkg-plist
Committed, thanks.