post_install() { cat << EOF >>> /etc/suricata/suricata.yaml is main config file. >>> Add local configuration to /etc/suricata/local.yaml >>> Add local rules to /var/lib/suricata/rules/local.rules >>> TIP: iptables rule to monitor all FORWARDed traffic: >>> iptables -I FORWARD -j NFQUEUE --queue-bypass >>> Note: Logs are automatically deleted after 5 days >>> use logstash to store them >>> To update rules first time run: suricata-update >>> For automatic updates enable suricata-update.timer EOF } post_upgrade() { post_install $1 } # vim:set ts=2 sw=2 et: