suricata/systemd/suricata.service

   1 [Unit]
   2 Description=Open Source Next Generation Intrusion Detection and Prevention Engine
   3 After=syslog.target network.target
   4
   5 [Service]
   6 Type=forking
   7 ExecStart=/usr/bin/suricata -c /etc/suricata/suricata.conf -q 0 -q 1 -D
   8 ExecStartPost=/sbin/iptables -I INPUT -j NFQUEUE -–queue-balance 0:1
   9 ExecReload=/bin/kill -HUP $MAINPID
  10 ExecStopPre=/sbin/iptables -D INPUT -j NFQUEUE -–queue-balance 0:1
  11 ExecStop=/bin/kill $MAINPID
  12
  13 [Install]
  14 WantedBy=multi-user.target