ntopng/tests/syslog

Suricata Test
-------------

The suricata.log file contains sample syslog output from Suricata,
it can be used to test the Suricata log ingestion in ntopng.

As first step please configure ntopng as explained in the user's
guide at:

  https://www.ntop.org/guides/ntopng/advanced_features/suricata.html?highlight=suricata#ntopng-configuration

Example for the impatient:

  ntopng -i syslog://127.0.0.1:9999

As second step, use netcat to replay the log to the configured
port of the ntopng host:

  cat suricata.log | netcat 127.0.0.1 9999

The sample log file contains both flows and alerts (e.g. an alert
about a trojan AlienSpy RAT is present).