Skip to content

Commit

Permalink
Add netcat-openbsd to Suricata image for PCAP_OVER_IP
Browse files Browse the repository at this point in the history
The Suricata entrypoint.sh uses `nc -d` to detach from stdin when using
PCAP_OVER_IP mode, however the builtin nc of BusyBox does not have this flag.

This ensures that netcat-openbsd is installed so it can use this flag.
yunzheng committed Dec 2, 2024
1 parent d298079 commit 744f185
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion suricata/Dockerfile
Original file line number Diff line number Diff line change
@@ -7,7 +7,7 @@ COPY ./suricata-eve-sqlite-output/ /src/
RUN RUSTFLAGS="-C target-feature=-crt-static" cargo build --release

FROM alpine:3.20
RUN apk add --no-cache suricata lua5.1-sqlite
RUN apk add --no-cache suricata lua5.1-sqlite netcat-openbsd
COPY . /suricata
COPY --from=builder /src/target/release/libeve_sqlite_output.so /suricata/
ENTRYPOINT ["/suricata/entrypoint.sh"]

0 comments on commit 744f185

Please sign in to comment.