Month: May 2025

Today, I had a go at the ETOPEN Suricata rules in Security Onion 2.4.150. I disabled long ago the rule numbered “2060252” and named “ET INFO Go-http-client User-Agent Observed Inbound.” This one popped up when I hunted for the reason the Suricata rules showed “Rule mismatch.”