etc/suricata
etc/suricata/suricata.yaml
usr/bin/suricata
+usr/sbin/convert-ids-backend-files
#usr/share/doc/suricata
#usr/share/doc/suricata/AUTHORS
#usr/share/doc/suricata/Basic_Setup.txt
#usr/share/doc/suricata/GITGUIDE
#usr/share/doc/suricata/INSTALL
-#usr/share/doc/suricata/INSTALL.PF_RING
-#usr/share/doc/suricata/INSTALL.WINDOWS
#usr/share/doc/suricata/NEWS
#usr/share/doc/suricata/README
#usr/share/doc/suricata/Setting_up_IPSinline_for_Linux.txt
usr/share/suricata
#usr/share/suricata/classification.config
#usr/share/suricata/reference.config
-#usr/share/suricata/threshold.config
#usr/share/suricata/rules
#usr/share/suricata/rules/app-layer-events.rules
#usr/share/suricata/rules/decoder-events.rules
#usr/share/suricata/rules/dnp3-events.rules
#usr/share/suricata/rules/dns-events.rules
#usr/share/suricata/rules/files.rules
+#usr/share/suricata/rules/ftp-events.rules
#usr/share/suricata/rules/http-events.rules
+#usr/share/suricata/rules/http2-events.rules
#usr/share/suricata/rules/ipsec-events.rules
#usr/share/suricata/rules/kerberos-events.rules
#usr/share/suricata/rules/modbus-events.rules
+#usr/share/suricata/rules/mqtt-events.rules
#usr/share/suricata/rules/nfs-events.rules
#usr/share/suricata/rules/ntp-events.rules
+#usr/share/suricata/rules/quic-events.rules
+#usr/share/suricata/rules/rfb-events.rules
#usr/share/suricata/rules/smb-events.rules
#usr/share/suricata/rules/smtp-events.rules
+#usr/share/suricata/rules/ssh-events.rules
#usr/share/suricata/rules/stream-events.rules
#usr/share/suricata/rules/tls-events.rules
+#usr/share/suricata/threshold.config
var/cache/suricata
var/lib/suricata
+#var/lib/suricata/data
var/log/suricata
#var/log/suricata/certs
#var/log/suricata/files