Updated suricata to now work with port mirroring

config/assets/suricata.yaml

@@ -42,7 +42,7 @@ stats:
   enabled: yes
 
 af-packet:
-  - interface: enp6s18
+  - interface: enp6s19
     use-mmap: yes
     tpacket-v3: yes
     cluster-id: 99

config/logging.nix

@@ -11,6 +11,8 @@
     })
   ];
 
+  networking.firewall.enable = false;
+
   users.users.logging = import ./user.nix;
 
   environment.systemPackages = with pkgs; [
@@ -193,7 +195,7 @@
     serviceConfig = {
       type = "simple";
       User = "logging";
-      ExecStart = "${pkgs.suricata}/bin/suricata -c /etc/suricata.yaml -i enp6s18";
+      ExecStart = "${pkgs.suricata}/bin/suricata -c /etc/suricata.yaml -i enp6s19";
       Restart = "on-failure";
       CapabilityBoundingSet = "CAP_NET_RAW CAP_NET_ADMIN";
       AmbientCapabilities = "CAP_NET_RAW CAP_NET_ADMIN";