SURICATA-UPDATE(1)

📦
version 1.3.8 · 8 versions
, in ubuntu stonking

🌸 SURICATA-UPDATE 🌸

section 1, User Commands — and honestly? it's giving "keep your rules fresh or perish" 💅

🎀 NAME 🎀

suricata-update — the tool to update Suricata sources. that's the whole assignment bestie, no notes 💖

✨ DESCRIPTION ✨

okay so first thing, here's the shape of the update command as it's written, and yes you need all of it:

suricata-update update [-h] [-v] [-q] [-D <directory>] [-c <filename>]
                       [--suricata-conf <filename>] [--suricata <path>]
                       [--suricata-version <version>] [-V] [-s] [-o <directory>] [-f]
                       [--disable-conf <filename>] [--enable-conf <filename>]
                       [--modify-conf <filename>] [--drop-conf <filename>] [--no-reload]
                       [--no-test] [--offline] [--fail]

Every single one of those flags gets its own moment below, because we do not skip options in this house 🫶

💅 options: 💅

  • -h, --help — pop this and it shows you this help message and then exits, like a polite lil goodbye 👋
  • -v, --verbose — be more verbose. it will simply tell you everything that is happening, and honestly? we love a yapper 🔍
  • -q, --quiet — be quiet. warning and error messages only, so it clams up unless something's actually wrong 🤫
  • -D, --data-dir <directory> — the data directory. default is /var/lib/suricata 📂
  • -c, --config <filename> — the configuration file. default is /etc/suricata/update.yaml 📝
  • --suricata-conf <filename> — configuration file. default is /etc/suricata/suricata.yaml ⚙️
  • --suricata <path> — path to the Suricata program 🛰️
  • --suricata-version <version> — override the Suricata version, in case it needs to be told 🔢
  • -V, --version — display version. that's it, that's the flag 🏷️
  • -s, --show-advanced — show advanced options, for when you're feeling brave 👀
  • -o, --output <directory> — the directory to write rules to 📁
  • -f, --force — force operations that might otherwise be skipped. no hesitation, no chill 💥
  • --disable-conf <filename> — filename of rule disable filters 🚫
  • --enable-conf <filename> — filename of rule enable filters ✅
  • --modify-conf <filename> — filename of rule modification filters 🔧
  • --drop-conf <filename> — filename of drop rule filters 🗑️
  • --no-reload — disable reload 🔌
  • --no-test — disable testing rules with Suricata 🧪
  • --offline — run offline using the most recent cached rules. plane mode but for rules ✈️
  • --fail — strictly fail and exit in case of an error. zero tolerance, it means it 😤

🦋 other commands: 🦋

this tool has siblings and they all eat 💖

  • update-sources — update the source index 🔄
  • list-sources — list available sources 📜
  • list-enabled-sources — list enabled sources ✅
  • enable-source — enable a source from the index 🔛
  • disable-source — disable an enabled source 🔕
  • remove-source — remove an enabled or disabled source 🧹
  • add-source — add a new source by URL 🔗
  • check-versions — check version of suricata-update 🔎

🔥 SEE ALSO 🔥

more information on suricata-update can be found in the online documentation https://suricata-update.readthedocs.io. go read it, iykyk 📚

and that's the whole page bestie — brought to you by suricata-update version 1.3.8, dated July 2026. 🎀✨ slay responsibly 💅

📦 where this page comes from