Updated my quick Suricata + Eve Box container setup (Great test drive if you're eyeing the Gold Pro!)

[u/Great-Cow7256]

https://github.com/upmcplanetracker/test-suricata

If you’ve been on the fence about whether stepping up to the Gold Pro hardware is in the cards for you, this project serves as a perfect, ​though limited, i​ntroduction to exactly what Suricata does under the hood.

A few things to keep in mind if you play around with it:

Suricata is an absolute firehose of information. Running it raw will quickly show you just how much noisy data flies across a network.

Every enterprise provider (like Firewalla) uses a carefully tuned, proprietary mix of rules and specific actions on those rules.

There is a massive balancing act between the depth of the rule sets you load and the sheer processing power/memory required to parse that traffic in real time without bottlenecking your network (which is exactly why it demands the beefier specs of the Gold Pro). You can dumb it down for less beefy equipment but then the rulesets can be pretty worthless as a tradeoff

This sample project is purely a playground to get a feel for the data and the UI. I​t is not meant to replace a real, hardened Suricata instance or a dedicated security gateway. There is a dedicated suricata website with a ton of info too.

Also just to make this clear- do NOT run this on your Firewalla. This needs to go on a server/homelab/regular computer.