Description
Network traffic can be inspected, logged, and optionally blocked through Suricata with NFQUEUE support. This package builds Suricata with eBPF, GeoIP, NFQUEUE, configuration files, logrotate rules, sysusers, tmpfiles, suricata.service, and update timer units. It is high-impact security infrastructure; packet capture, IPS policy, firewall integration, and privacy controls must be configured carefully.