Building Suricata w/ Cuda
-
I was trolling the Suricata website and see a few different build guides for flavours of Linux.
Has anyone posted a cookbook for building Suricata w/ Cuda on the pfsense distribution and doing whatever is required to patch it into the pfsense gui?
I'm thinking this could provide an entertaining and educational hobby in the DMZ with a honeypot.
-
I was trolling the Suricata website and see a few different build guides for flavours of Linux.
Has anyone posted a cookbook for building Suricata w/ Cuda on the pfsense distribution and doing whatever is required to patch it into the pfsense gui?
I'm thinking this could provide an entertaining and educational hobby in the DMZ with a honeypot.
No one has done this so far as I know. Because using Cuda is a sort of specialized thing, I did not include that in the standard pfSense package I created. You could certainly build your own CUDA-enabled binary. You just need to create a FreeBSD 10.x or 11.x virtual machine to use as a package builder. Then just compile the source files from FreeBSD ports and create a package. You could then copy that over to a pfSense box and install. I assume you don't want blocking (you mentioned for a honeypot), so the stock FreeBSD ports version of Suricata would work. This would mean you don't need my blocking plugin patch (which you could only get by signing a CLA and getting access to the pfSense FreeBSD-ports Github repository).
In terms of patching CUDA support into the GUI, you can configure everything by hand by adding the appropriate information to this file –
/usr/local/pkg/suricata/suricata_yaml_template.inc
That file is used to build the suricata.yaml for each interface.
Bill
