{"id":32539,"date":"2025-10-23T02:42:02","date_gmt":"2025-10-22T23:42:02","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=32539"},"modified":"2025-10-23T02:42:02","modified_gmt":"2025-10-22T23:42:02","slug":"giris-suricata-nedir-ve-neden-kullanmalisiniz","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/","title":{"rendered":"Giri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z?"},"content":{"rendered":"

<\/p>\n

Giri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z?<\/h2>\n

G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k siber tehdit ortam\u0131nda, a\u011f g\u00fcvenli\u011fi her zamankinden daha kritik bir \u00f6neme sahiptir. \u0130\u015fletmeler ve bireyler, s\u00fcrekli geli\u015fen sald\u0131r\u0131 tekniklerine kar\u015f\u0131 kendilerini korumak i\u00e7in g\u00fc\u00e7l\u00fc g\u00fcvenlik ara\u00e7lar\u0131na ihtiya\u00e7 duyarlar. \u0130\u015fte bu noktada Suricata devreye girer. Suricata, a\u00e7\u0131k kaynakl\u0131, y\u00fcksek performansl\u0131 bir A\u011f Sald\u0131r\u0131 Tespit Sistemi (NIDS), A\u011f Sald\u0131r\u0131 \u00d6nleme Sistemi (NIPS) ve A\u011f G\u00fcvenli\u011fi \u0130zleme (NSM) motorudur.<\/p>\n

OISF (Open Information Security Foundation) taraf\u0131ndan geli\u015ftirilen Suricata, \u00e7oklu i\u015f par\u00e7ac\u0131\u011f\u0131 (multi-threading) yetene\u011fi sayesinde modern donan\u0131mlardan tam verim alabilir ve gigabit h\u0131z\u0131ndaki a\u011flarda bile etkili bir \u015fekilde \u00e7al\u0131\u015fabilir. Temel olarak, a\u011f trafi\u011fini derinlemesine inceleyerek k\u00f6t\u00fc ama\u00e7l\u0131 faaliyetleri, bilinen tehdit imzalar\u0131n\u0131 ve anormal davran\u0131\u015flar\u0131 tespit eder. Bu tespitler, yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131 \u015fekle ba\u011fl\u0131 olarak ya uyar\u0131larda bulunur (IDS modu) ya da k\u00f6t\u00fc ama\u00e7l\u0131 trafi\u011fi engeller (IPS modu). Ayr\u0131ca, a\u011fdaki olaylar\u0131 JSON format\u0131nda zengin meta verilerle kaydederek daha sonraki analizler i\u00e7in g\u00fc\u00e7l\u00fc bir temel sunar (NSM modu).<\/p>\n

CentOS 8 Stream gibi modern bir i\u015fletim sisteminde Suricata kullanmak, a\u011f\u0131n\u0131z\u0131n g\u00fcvenli\u011fini art\u0131rmak i\u00e7in proaktif bir ad\u0131m anlam\u0131na gelir. Bu rehberde, CentOS 8 Stream \u00fczerinde Suricata’y\u0131 ad\u0131m ad\u0131m nas\u0131l kuraca\u011f\u0131n\u0131z\u0131, temel yap\u0131land\u0131rmalar\u0131n\u0131 nas\u0131l yapaca\u011f\u0131n\u0131z\u0131 ve \u00e7al\u0131\u015f\u0131r duruma getirece\u011finizi detayl\u0131 bir \u015fekilde \u00f6\u011freneceksiniz.<\/p>\n

Ad\u0131m 1: Sistem G\u00fcncelleme ve \u00d6n Gereksinimlerin Haz\u0131rlanmas\u0131<\/h2>\n

Suricata kurulumuna ba\u015flamadan \u00f6nce, sisteminizin g\u00fcncel oldu\u011fundan ve gerekli t\u00fcm ba\u011f\u0131ml\u0131l\u0131klar\u0131n y\u00fckl\u00fc oldu\u011fundan emin olmal\u0131y\u0131z. Bu, olas\u0131 uyumluluk sorunlar\u0131n\u0131 \u00f6nler ve en iyi performans\u0131 sa\u011flar.<\/p>\n

Sistemi G\u00fcncelleme<\/h3>\n

\u0130lk ad\u0131m olarak, CentOS 8 Stream sisteminizdeki t\u00fcm paketleri en son s\u00fcr\u00fcmlerine g\u00fcncelleyelim:<\/p>\n

sudo dnf update -y\nsudo dnf upgrade -y<\/code><\/pre>\n
Bu komutlar, mevcut t\u00fcm paketleri g\u00fcnceller ve y\u00fckseltir. \u0130\u015flem tamamland\u0131ktan sonra, baz\u0131 \u00e7ekirdek g\u00fcncellemeleri veya \u00f6nemli sistem de\u011fi\u015fiklikleri i\u00e7in sunucunuzu yeniden ba\u015flatman\u0131z gerekebilir. E\u011fer yeniden ba\u015flatma uyar\u0131s\u0131 al\u0131rsan\u0131z veya emin olmak isterseniz:<\/p>\n
sudo reboot<\/code><\/pre>\n
Gerekli Ba\u011f\u0131ml\u0131l\u0131klar\u0131n ve Ara\u00e7lar\u0131n Kurulumu<\/h3>\n
Suricata ve onunla birlikte \u00e7al\u0131\u015facak ara\u00e7lar i\u00e7in baz\u0131 temel paketlere ihtiyac\u0131m\u0131z olacak. \u00d6zellikle, Suricata’n\u0131n resmi depolar\u0131n\u0131 kolayca ekleyebilmek i\u00e7in dnf-utils<\/code> ve baz\u0131 yayg\u0131n a\u011f ara\u00e7lar\u0131 faydal\u0131 olacakt\u0131r. Ayr\u0131ca, Suricata’n\u0131n baz\u0131 ba\u011f\u0131ml\u0131l\u0131klar\u0131 EPEL (Extra Packages for Enterprise Linux) deposunda bulunabilir, bu y\u00fczden onu da ekleyece\u011fiz.<\/p>\n
sudo dnf install -y epel-release\nsudo dnf install -y dnf-utils nano wget curl git<\/code><\/pre>\n
    \n
  • epel-release<\/code>: EPEL deposunu sisteme ekler. Bu depo, RHEL tabanl\u0131 sistemler i\u00e7in bir\u00e7ok ek paketi bar\u0131nd\u0131r\u0131r.<\/li>\n
  • dnf-utils<\/code>: dnf config-manager<\/code> gibi yard\u0131mc\u0131 programlar\u0131 i\u00e7erir, bu da harici depolar\u0131 y\u00f6netmek i\u00e7in kullan\u0131\u015fl\u0131d\u0131r.<\/li>\n
  • nano<\/code>: Metin d\u00fczenleyici (iste\u011fe ba\u011fl\u0131, vi<\/code> veya vim<\/code> de kullanabilirsiniz).<\/li>\n
  • wget<\/code>, curl<\/code>, git<\/code>: Dosya indirme ve versiyon kontrol\u00fc i\u00e7in yayg\u0131n kullan\u0131lan ara\u00e7lar.<\/li>\n<\/ul>\n
    Bu ad\u0131mlar\u0131 tamamlad\u0131ktan sonra, sisteminiz Suricata kurulumuna haz\u0131r hale gelmi\u015f olacakt\u0131r.<\/p>\n
    Ad\u0131m 2: Suricata Depolar\u0131n\u0131n Eklenmesi ve Kurulum<\/h2>\n
    CentOS 8 Stream’in varsay\u0131lan depolar\u0131nda genellikle Suricata’n\u0131n en g\u00fcncel s\u00fcr\u00fcm\u00fc bulunmaz. En iyi performans, en yeni \u00f6zellikler ve g\u00fcvenlik yamalar\u0131 i\u00e7in Suricata’n\u0131n resmi OISF (Open Information Security Foundation) deposunu kullanmak en iyi yakla\u015f\u0131md\u0131r.<\/p>\n
    OISF Suricata Deposunu Ekleme<\/h3>\n
    OISF, Suricata i\u00e7in resmi paket depolar\u0131 sa\u011flar. Bu depolar\u0131 eklemek, Suricata’y\u0131 dnf<\/code> paket y\u00f6neticisi arac\u0131l\u0131\u011f\u0131yla kolayca kurmam\u0131z\u0131 ve g\u00fcncel tutmam\u0131z\u0131 sa\u011flar. CentOS 8 Stream i\u00e7in a\u015fa\u011f\u0131daki komutu kullanarak depoyu ekleyebiliriz:<\/p>\n
    sudo dnf config-manager --add-repo https:\/\/download.openinfosecfoundation.org\/rpms\/oisf\/suricata-6.0\/oisf.repo<\/code><\/pre>\n
    Bu komut, Suricata 6.x serisi i\u00e7in OISF deposunu sisteminize ekleyecektir. Depo eklendikten sonra, dnf<\/code> paket listesini g\u00fcncelleyerek yeni depodaki paketleri tan\u0131mas\u0131n\u0131 sa\u011flayabiliriz:<\/p>\n
    sudo dnf clean all\nsudo dnf makecache<\/code><\/pre>\n
    dnf clean all<\/code> komutu, DNF’nin \u00f6nbelle\u011fini temizlerken, dnf makecache<\/code> ise yeni depo bilgilerini de i\u00e7eren paket meta verilerini yeniden olu\u015fturur.<\/p>\n
    Suricata’y\u0131 Kurma<\/h3>\n
    Depoyu ba\u015far\u0131yla ekledikten sonra, Suricata’y\u0131 kurmak art\u0131k \u00e7ok kolayd\u0131r:<\/p>\n
    sudo dnf install suricata -y<\/code><\/pre>\n
    Bu komut, Suricata paketini ve t\u00fcm gerekli ba\u011f\u0131ml\u0131l\u0131klar\u0131n\u0131 kuracakt\u0131r. Kurulum tamamland\u0131ktan sonra, Suricata’n\u0131n do\u011fru bir \u015fekilde kurulup kurulmad\u0131\u011f\u0131n\u0131 kontrol edebiliriz:<\/p>\n
    suricata -V<\/code><\/pre>\n
    Bu komut, kurulu Suricata s\u00fcr\u00fcm\u00fcn\u00fc g\u00f6sterecektir. \u00c7\u0131kt\u0131da bir s\u00fcr\u00fcm numaras\u0131 g\u00f6rmeniz, kurulumun ba\u015far\u0131l\u0131 oldu\u011funu g\u00f6sterir.<\/p>\n
    \u00d6rnek \u00c7\u0131kt\u0131:\nThis is Suricata version 6.0.x (rev: ...)\n...<\/code><\/pre>\n
    Kurulum dizini genellikle \/etc\/suricata\/<\/code> olacakt\u0131r. Yap\u0131land\u0131rma dosyalar\u0131, kural dosyalar\u0131 ve di\u011fer \u00f6nemli bile\u015fenler bu dizinde yer al\u0131r.<\/p>\n
    Ad\u0131m 3: Suricata’n\u0131n Temel Yap\u0131land\u0131rmas\u0131<\/h2>\n
    Suricata’y\u0131 kurduktan sonra, onu a\u011f ortam\u0131n\u0131za uygun \u015fekilde yap\u0131land\u0131rmam\u0131z gerekir. Ana yap\u0131land\u0131rma dosyas\u0131 \/etc\/suricata\/suricata.yaml<\/code>‘d\u0131r. Bu dosyada, Suricata’n\u0131n hangi a\u011f aray\u00fcz\u00fcn\u00fc dinleyece\u011finden, hangi kurallar\u0131 kullanaca\u011f\u0131na ve loglama davran\u0131\u015f\u0131na kadar bir\u00e7ok ayar bulunur.<\/p>\n
    A\u011f Aray\u00fcz\u00fcn\u00fc ve IP Adreslerini Yap\u0131land\u0131rma<\/h3>\n
    suricata.yaml<\/code> dosyas\u0131n\u0131 bir metin d\u00fczenleyici ile a\u00e7\u0131n:<\/p>\n
    sudo nano \/etc\/suricata\/suricata.yaml<\/code><\/pre>\n
    Yap\u0131land\u0131rma dosyas\u0131nda ilk olarak de\u011fi\u015ftirmemiz gereken \u00f6nemli alanlar \u015funlard\u0131r:<\/p>\n
    1. home_net<\/code> ve external_net<\/code> Tan\u0131mlar\u0131:<\/strong><\/p>\n
    Suricata’n\u0131n a\u011f\u0131n\u0131zdaki “ev” a\u011f\u0131n\u0131 bilmesi, i\u00e7 a\u011f trafi\u011fi ile d\u0131\u015f a\u011f trafi\u011fini ay\u0131rt etmesi i\u00e7in kritik \u00f6neme sahiptir. Kural motoru, bu tan\u0131mlar\u0131 kullanarak tehditleri daha do\u011fru bir \u015fekilde s\u0131n\u0131fland\u0131r\u0131r. Kendi i\u00e7 a\u011f\u0131n\u0131z\u0131n IP aral\u0131\u011f\u0131n\u0131 home_net<\/code> olarak belirtmelisiniz.<\/p>\n
    # Configure your preferred network interface to use.\n
    (This is typically 'eth0' or 'enpXsY' on Linux, 're0' or 'em0' on BSD)<\/h2>\n#af-packet:\n
    - interface: eth0<\/h2>\n
    threads: 1<\/h2>\n
    defrag: yes<\/h2>\n
    cluster-type: cluster_flow<\/h2>\n
    cluster-id: 99<\/h2>\n
    copy-mode: ips<\/h2>\n
    copy-iface: eth1<\/h2>\n
    buffer-size: 64mb<\/h2>\n
    ring-size: 200000<\/h2>\n
    release-host: yes<\/h2>\n
    use-direct-qemu-interface: no<\/h2>\n
    bypass: yes<\/h2>\n
    #rx-ring-size: 4096<\/h2>\n
    #tx-ring-size: 4096<\/code><\/pre>\n<\/h2>\n
    Bu b\u00f6l\u00fcmde, af-packet<\/code> alt\u0131nda interface<\/code> sat\u0131r\u0131n\u0131 bulup yorum i\u015faretini (#<\/code>) kald\u0131r\u0131n ve Suricata’n\u0131n dinlemesini istedi\u011finiz a\u011f aray\u00fcz\u00fcn\u00fcz\u00fcn ad\u0131n\u0131 girin. A\u011f aray\u00fcz\u00fcn\u00fcz\u00fc ip a<\/code> komutuyla \u00f6\u011frenebilirsiniz (\u00f6rne\u011fin, enp0s3<\/code> veya eth0<\/code>).<\/p>\n
    # \u00d6rnek:\naf-packet:\n  - interface: enp0s3 # Kendi a\u011f aray\u00fcz\u00fcn\u00fcz\u00fcn ad\u0131n\u0131 buraya yaz\u0131n\n    threads: 1\n    # Di\u011fer ayarlar...<\/code><\/pre>\n
    2. home_net<\/code> ve external_net<\/code> Tan\u0131mlar\u0131:<\/strong><\/p>\n
    Bu b\u00f6l\u00fcmler, Suricata’n\u0131n hangi IP adres aral\u0131klar\u0131n\u0131 kendi a\u011f\u0131n\u0131z (g\u00fcvenli) ve hangi aral\u0131klar\u0131 d\u0131\u015f a\u011f (g\u00fcvenli olmayan) olarak kabul edece\u011fini belirler. Genellikle home_net<\/code>‘i kendi i\u00e7 a\u011f\u0131n\u0131z\u0131n IP aral\u0131\u011f\u0131na ayarlars\u0131n\u0131z. Birden fazla a\u011f aral\u0131\u011f\u0131 virg\u00fclle ayr\u0131labilir.<\/p>\n
    # Varsay\u0131lan olarak:\n
    vars:<\/h2>\n
    address-groups:<\/h2>\n
    HOME_NET: \"[192.168.0.0\/16,10.0.0.0\/8,172.16.0.0\/12]\"<\/h2>\n
    EXTERNAL_NET: \"!$HOME_NET\"<\/code><\/pre>\n<\/h2>\n
    HOME_NET<\/code> tan\u0131m\u0131n\u0131 kendi yerel a\u011f IP aral\u0131\u011f\u0131n\u0131zla g\u00fcncelleyin. \u00d6rne\u011fin, e\u011fer i\u00e7 a\u011f\u0131n\u0131z 192.168.1.0\/24<\/code> ise:<\/p>\n
    # \u00d6rnek:\nvars:\n  address-groups:\n    HOME_NET: \"[192.168.1.0\/24]\" # Kendi i\u00e7 a\u011f IP aral\u0131\u011f\u0131n\u0131z\u0131 buraya yaz\u0131n\n    EXTERNAL_NET: \"!$HOME_NET\"<\/code><\/pre>\n
    EXTERNAL_NET<\/code> genellikle !$HOME_NET<\/code> olarak b\u0131rak\u0131l\u0131r, bu da Suricata’ya HOME_NET<\/code> d\u0131\u015f\u0131ndaki her \u015feyin d\u0131\u015f a\u011f oldu\u011funu s\u00f6yler.<\/p>\n
    Kural Dosyalar\u0131n\u0131 Yap\u0131land\u0131rma<\/h3>\n
    Suricata, tehditleri tespit etmek i\u00e7in kural dosyalar\u0131n\u0131 kullan\u0131r. Bu kurallar genellikle Snort veya Suricata format\u0131nda yaz\u0131l\u0131r. Suricata, varsay\u0131lan olarak belirli bir dizinde kural dosyalar\u0131n\u0131 arar. Bu ayarlar da suricata.yaml<\/code> dosyas\u0131nda bulunur.<\/p>\n
    rule-files<\/code> b\u00f6l\u00fcm\u00fcn\u00fc bulun. Buras\u0131, Suricata’n\u0131n hangi kural dosyalar\u0131n\u0131 y\u00fckleyece\u011fini belirtti\u011finiz yerdir. Genellikle \/etc\/suricata\/rules<\/code> dizini kullan\u0131l\u0131r.<\/p>\n
    # Varsay\u0131lan olarak:\n
    rule-files:<\/h2>\n
    - suricata.rules<\/code><\/pre>\n<\/h2>\n
    Bu b\u00f6l\u00fcm\u00fc, kullanmak istedi\u011finiz kural dosyalar\u0131n\u0131 i\u00e7erecek \u015fekilde g\u00fcncelleyin. Ba\u015flang\u0131\u00e7 i\u00e7in, suricata.rules<\/code> veya local.rules<\/code> gibi temel bir dosya belirleyebilirsiniz.<\/p>\n
    Kurallar\u0131 \u0130ndirme ve G\u00fcncelleme<\/h3>\n
    Suricata’n\u0131n en \u00f6nemli i\u015flevlerinden biri, g\u00fcncel tehditlere kar\u015f\u0131 koruma sa\u011flamas\u0131d\u0131r. Bu da d\u00fczenli olarak g\u00fcncellenen kural setlerini gerektirir. OISF, ET Open (Emerging Threats Open) gibi \u00e7e\u015fitli kural sa\u011flay\u0131c\u0131lar\u0131 vard\u0131r. Suricata, suricata-update<\/code> arac\u0131 ile bu kurallar\u0131 kolayca y\u00f6netmenizi sa\u011flar.<\/p>\n
    suricata-update<\/code> arac\u0131n\u0131 kullanarak kural setlerini indirelim:<\/p>\n
    sudo suricata-update<\/code><\/pre>\n
    Bu komut, varsay\u0131lan olarak ET Open kural setini indirir ve \/var\/lib\/suricata\/rules<\/code> dizinine kaydeder. Ard\u0131ndan bu kurallar\u0131 \/etc\/suricata\/suricata.yaml<\/code> dosyas\u0131nda belirtilen kural dizinine ba\u011flar. E\u011fer \u00f6zel bir kural seti kullanmak isterseniz, suricata-update<\/code> komutuna parametreler ekleyebilirsiniz (\u00f6rne\u011fin, --enable-source ptresearch\/attackdetection<\/code>).<\/p>\n
    Kurallar indirildikten sonra, suricata.yaml<\/code> dosyas\u0131ndaki rule-files<\/code> b\u00f6l\u00fcm\u00fcn\u00fc g\u00fcncellenen kural dosyalar\u0131n\u0131 g\u00f6sterecek \u015fekilde ayarlaman\u0131z gerekebilir. Genellikle suricata-update<\/code> bunu otomatik olarak y\u00f6netir ve bir suricata.rules<\/code> dosyas\u0131 olu\u015fturur veya mevcut dosyay\u0131 g\u00fcnceller.<\/p>\n
    # \/etc\/suricata\/suricata.yaml dosyas\u0131nda:\n
    rule-files:<\/h2>\n
    - \/var\/lib\/suricata\/rules\/suricata.rules # suricata-update'in olu\u015fturdu\u011fu dosya<\/code><\/pre>\n<\/h2>\n
    suricata-update<\/code> komutunu d\u00fczenli olarak \u00e7al\u0131\u015ft\u0131rmak i\u00e7in bir cron i\u015fi olu\u015fturman\u0131z \u00f6nerilir. Bu sayede Suricata, her zaman en g\u00fcncel tehdit imzalar\u0131yla \u00e7al\u0131\u015f\u0131r.<\/p>\n
    Di\u011fer \u00d6nemli Yap\u0131land\u0131rma Ayarlar\u0131<\/h3>\n
      \n
    • Loglama:<\/strong> Suricata, olaylar\u0131 \/var\/log\/suricata\/<\/code> dizinine kaydeder. suricata.yaml<\/code> dosyas\u0131nda outputs<\/code> b\u00f6l\u00fcm\u00fcnde log formatlar\u0131n\u0131 (eve-log<\/code>, fast.log<\/code>, json<\/code> vb.) ve detay seviyelerini yap\u0131land\u0131rabilirsiniz. eve-log<\/code> (Extensible Event Format) genellikle SIEM sistemleriyle entegrasyon i\u00e7in tercih edilir.<\/li>\n
    • Performans Ayarlar\u0131:<\/strong> Y\u00fcksek trafikli a\u011flar i\u00e7in flow<\/code>, stream<\/code> ve defrag<\/code> gibi b\u00f6l\u00fcmlerdeki ayarlar\u0131n optimize edilmesi gerekebilir. Ancak ba\u015flang\u0131\u00e7 i\u00e7in varsay\u0131lanlar genellikle yeterlidir.<\/li>\n<\/ul>\n
      Yap\u0131land\u0131rma dosyas\u0131nda yapt\u0131\u011f\u0131n\u0131z de\u011fi\u015fiklikleri kaydedip kapat\u0131n.<\/p>\n
      Ad\u0131m 4: Suricata’n\u0131n \u00c7al\u0131\u015ft\u0131r\u0131lmas\u0131 ve Test Edilmesi<\/h2>\n
      Yap\u0131land\u0131rma ad\u0131mlar\u0131n\u0131 tamamlad\u0131ktan sonra, Suricata’y\u0131 \u00e7al\u0131\u015ft\u0131rmaya ve do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olmak i\u00e7in test etmeye haz\u0131r\u0131z.<\/p>\n
      Yap\u0131land\u0131rma Dosyas\u0131n\u0131 Test Etme<\/h3>\n
      Suricata’y\u0131 ba\u015flatmadan \u00f6nce, yap\u0131land\u0131rma dosyan\u0131z\u0131n (suricata.yaml<\/code>) s\u00f6zdizimi a\u00e7\u0131s\u0131ndan do\u011fru oldu\u011fundan emin olmak \u00e7ok \u00f6nemlidir. Yanl\u0131\u015f bir yap\u0131land\u0131rma, Suricata’n\u0131n ba\u015flamamas\u0131na veya hatal\u0131 \u00e7al\u0131\u015fmas\u0131na neden olabilir. A\u015fa\u011f\u0131daki komutu kullanarak yap\u0131land\u0131rma dosyan\u0131z\u0131 test edebilirsiniz:<\/p>\n
      sudo suricata -T -c \/etc\/suricata\/suricata.yaml -i enp0s3 # Kendi aray\u00fcz\u00fcn\u00fcz\u00fc yaz\u0131n<\/code><\/pre>\n
      Bu komut:<\/p>\n
        \n
      • -T<\/code>: Test modunda \u00e7al\u0131\u015ft\u0131r\u0131r.<\/li>\n
      • -c \/etc\/suricata\/suricata.yaml<\/code>: Kullan\u0131lacak yap\u0131land\u0131rma dosyas\u0131n\u0131 belirtir.<\/li>\n
      • -i enp0s3<\/code>: Hangi a\u011f aray\u00fcz\u00fcnde test edilece\u011fini belirtir. Bu, suricata.yaml<\/code> dosyas\u0131nda belirtti\u011finiz aray\u00fczle e\u015fle\u015fmelidir.<\/li>\n<\/ul>\n
        E\u011fer yap\u0131land\u0131rma dosyan\u0131zda bir hata yoksa, \u00e7\u0131kt\u0131da “Configuration provided was successfully loaded.” benzeri bir mesaj g\u00f6rmelisiniz. Herhangi bir hata durumunda, Suricata hatan\u0131n nerede oldu\u011funu ve ne oldu\u011funu size bildirecektir. Bu durumda, suricata.yaml<\/code> dosyan\u0131z\u0131 tekrar kontrol etmeniz ve hatalar\u0131 d\u00fczeltmeniz gerekir.<\/p>\n
        Suricata Servisini Ba\u015flatma<\/h3>\n
        Yap\u0131land\u0131rma testi ba\u015far\u0131l\u0131 olduktan sonra, Suricata servisini ba\u015flatabilir ve sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flamas\u0131n\u0131 sa\u011flayabiliriz:<\/p>\n
        sudo systemctl enable suricata\nsudo systemctl start suricata<\/code><\/pre>\n
          \n
        • systemctl enable suricata<\/code>: Suricata servisinin sistem a\u00e7\u0131l\u0131\u015f\u0131nda otomatik olarak ba\u015flamas\u0131n\u0131 sa\u011flar.<\/li>\n
        • systemctl start suricata<\/code>: Suricata servisini hemen ba\u015flat\u0131r.<\/li>\n<\/ul>\n
          Suricata Durumunu Kontrol Etme<\/h3>\n
          Servisin do\u011fru bir \u015fekilde \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in a\u015fa\u011f\u0131daki komutu kullan\u0131n:<\/p>\n
          sudo systemctl status suricata<\/code><\/pre>\n
          \u00c7\u0131kt\u0131da “active (running)” ifadesini g\u00f6rmelisiniz. Ayr\u0131ca, Suricata’n\u0131n loglar\u0131n\u0131 inceleyerek herhangi bir hata veya uyar\u0131 olup olmad\u0131\u011f\u0131n\u0131 kontrol edebilirsiniz:<\/p>\n
          sudo journalctl -u suricata -f<\/code><\/pre>\n
          Bu komut, Suricata servisinin anl\u0131k loglar\u0131n\u0131 g\u00f6sterir. Herhangi bir sorun varsa, burada detayl\u0131 bilgi bulabilirsiniz.<\/p>\n
          Suricata Loglar\u0131n\u0131 G\u00f6zlemleme<\/h3>\n
          Suricata, tespit etti\u011fi olaylar\u0131 \/var\/log\/suricata\/<\/code> dizinindeki dosyalara kaydeder. En yayg\u0131n log dosyalar\u0131 \u015funlard\u0131r:<\/p>\n
            \n
          • fast.log<\/code>: Basit, okunmas\u0131 kolay uyar\u0131lar\u0131 i\u00e7erir.<\/li>\n
          • eve.json<\/code>: T\u00fcm olaylar\u0131 (uyar\u0131lar, ak\u0131\u015flar, DNS istekleri, HTTP trafi\u011fi vb.) JSON format\u0131nda kaydeder. SIEM sistemleriyle entegrasyon i\u00e7in idealdir.<\/li>\n<\/ul>\n
            Uyar\u0131lar\u0131 ger\u00e7ek zamanl\u0131 olarak g\u00f6rmek i\u00e7in fast.log<\/code> dosyas\u0131n\u0131 izleyebilirsiniz:<\/p>\n
            sudo tail -f \/var\/log\/suricata\/fast.log<\/code><\/pre>\n
            Daha detayl\u0131 olaylar i\u00e7in eve.json<\/code> dosyas\u0131n\u0131 inceleyebilirsiniz:<\/p>\n
            sudo tail -f \/var\/log\/suricata\/eve.json | jq . # jq, JSON \u00e7\u0131kt\u0131s\u0131n\u0131 daha okunabilir yapar, y\u00fckl\u00fc de\u011filse kurman\u0131z gerekebilir: sudo dnf install -y jq<\/code><\/pre>\n
            Test Ama\u00e7l\u0131 Basit Bir Kural Olu\u015fturma (\u0130ste\u011fe Ba\u011fl\u0131)<\/h3>\n
            Suricata’n\u0131n \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in basit bir test kural\u0131 olu\u015fturup tetikleyebilirsiniz. \u00d6rne\u011fin, belirli bir web sitesine eri\u015fimi alg\u0131layan bir kural yazabiliriz.<\/p>\n
            \u00d6ncelikle, yerel kural dosyan\u0131z\u0131 olu\u015ftural\u0131m veya d\u00fczenleyelim. \u00d6rne\u011fin, \/etc\/suricata\/rules\/local.rules<\/code>:<\/p>\n
            sudo nano \/etc\/suricata\/rules\/local.rules<\/code><\/pre>\n
            A\u015fa\u011f\u0131daki kural\u0131 ekleyin:<\/p>\n
            alert http any any -> any any (msg:\"TEST: HTTP GET to example.com detected\"; flow:to_server,established; http.host; content:\"example.com\"; http_header; classtype:misc-activity; sid:2000001; rev:1;)<\/code><\/pre>\n
            Bu kural, example.com<\/code> adresine yap\u0131lan HTTP GET isteklerini alg\u0131lar. Kural dosyas\u0131n\u0131 kaydettikten sonra, suricata.yaml<\/code> dosyas\u0131nda bu kural dosyas\u0131n\u0131n y\u00fcklendi\u011finden emin olun (rule-files<\/code> b\u00f6l\u00fcm\u00fcne ekleyin).<\/p>\n
            # \/etc\/suricata\/suricata.yaml\n
            rule-files:<\/h2>\n
            - \/var\/lib\/suricata\/rules\/suricata.rules<\/h2>\n
            - \/etc\/suricata\/rules\/local.rules # Bu sat\u0131r\u0131 ekleyin<\/code><\/pre>\n<\/h2>\n
            Yap\u0131land\u0131rma dosyas\u0131n\u0131 g\u00fcncelledikten sonra, Suricata servisini yeniden ba\u015flat\u0131n:<\/p>\n
            sudo systemctl restart suricata<\/code><\/pre>\n
            \u015eimdi, test etmek i\u00e7in example.com<\/code> adresine bir HTTP iste\u011fi g\u00f6nderin:<\/p>\n
            curl http:\/\/example.com<\/code><\/pre>\n
            Ard\u0131ndan fast.log<\/code> dosyas\u0131n\u0131 kontrol edin:<\/p>\n
            sudo tail -f \/var\/log\/suricata\/fast.log<\/code><\/pre>\n
            E\u011fer her \u015fey do\u011fru yap\u0131land\u0131r\u0131ld\u0131ysa, loglarda “TEST: HTTP GET to example.com detected” mesaj\u0131n\u0131 g\u00f6rmelisiniz. Bu, Suricata’n\u0131n ba\u015far\u0131l\u0131 bir \u015fekilde \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ve kurallar\u0131 i\u015fledi\u011fini g\u00f6sterir.<\/p>\n
            Sonu\u00e7 ve S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h2>\n
            Bu rehberde, CentOS 8 Stream \u00fczerinde Suricata’y\u0131 ad\u0131m ad\u0131m nas\u0131l kuraca\u011f\u0131n\u0131z\u0131 ve temel yap\u0131land\u0131rmalar\u0131n\u0131 nas\u0131l yapaca\u011f\u0131n\u0131z\u0131 \u00f6\u011frendiniz. Sistem g\u00fcncellemelerinden ba\u015flayarak, OISF deposunu eklemeye, Suricata’y\u0131 kurmaya, ana yap\u0131land\u0131rma dosyas\u0131 suricata.yaml<\/code> \u00fczerinde gerekli de\u011fi\u015fiklikleri yapmaya ve son olarak servisi ba\u015flat\u0131p test etmeye kadar t\u00fcm s\u00fcre\u00e7leri ele ald\u0131k. Art\u0131k a\u011f\u0131n\u0131zdaki tehditleri tespit etmek ve potansiyel olarak \u00f6nlemek i\u00e7in g\u00fc\u00e7l\u00fc bir araca sahipsiniz.<\/p>\n
            Suricata’n\u0131n tam potansiyelini kullanmak i\u00e7in, kural setlerini d\u00fczenli olarak g\u00fcncellemek, loglar\u0131 izlemek ve gerekti\u011finde yap\u0131land\u0131rma ayarlar\u0131n\u0131 a\u011f ortam\u0131n\u0131za g\u00f6re optimize etmek \u00f6nemlidir. G\u00fcvenli\u011finiz i\u00e7in s\u00fcrekli tetikte olmak ve sistemlerinizi g\u00fcncel tutmak, siber tehditlere kar\u015f\u0131 en iyi savunmad\u0131r.<\/p>\n
            S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h3>\n
            Suricata’y\u0131 IPS (Sald\u0131r\u0131 \u00d6nleme Sistemi) modunda nas\u0131l \u00e7al\u0131\u015ft\u0131rabilirim?<\/h3>\n
            Suricata’y\u0131 IPS modunda \u00e7al\u0131\u015ft\u0131rmak i\u00e7in suricata.yaml<\/code> dosyas\u0131ndaki af-packet<\/code> b\u00f6l\u00fcm\u00fcnde copy-mode: ips<\/code> ayar\u0131n\u0131 yapman\u0131z ve Suricata’n\u0131n trafi\u011fi ge\u00e7irece\u011fi iki aray\u00fcz (bir giri\u015f, bir \u00e7\u0131k\u0131\u015f) belirtmeniz gerekir. Ayr\u0131ca, ilgili kurallar\u0131n drop<\/code> veya reject<\/code> aksiyonlar\u0131n\u0131 i\u00e7ermesi gerekir. Bu, genellikle bir a\u011f ge\u00e7idi veya k\u00f6pr\u00fc modunda yap\u0131land\u0131rma gerektirir ve daha karma\u015f\u0131k bir kurulumdur.<\/p>\n
            Suricata kurallar\u0131n\u0131 nas\u0131l g\u00fcncelleyebilirim?<\/h3>\n
            Kurallar\u0131 g\u00fcncellemek i\u00e7in sudo suricata-update<\/code> komutunu \u00e7al\u0131\u015ft\u0131r\u0131n. D\u00fczenli g\u00fcncellemeler i\u00e7in bu komutu bir cron i\u015fi olarak ayarlaman\u0131z \u00f6nerilir. \u00d6rne\u011fin, haftal\u0131k g\u00fcncelleme i\u00e7in sudo crontab -e<\/code> ile 0 3  <\/em> 0 \/usr\/bin\/suricata-update<\/code> sat\u0131r\u0131n\u0131 ekleyebilirsiniz (her Pazar sabah\u0131 03:00’te).<\/p>\n
            Suricata neden ba\u015flam\u0131yor veya hatalar veriyor?<\/h3>\n
            Suricata’n\u0131n ba\u015flamamas\u0131n\u0131n veya hata vermesinin en yayg\u0131n nedenleri \u015funlard\u0131r:<\/p>\n
              \n
            • suricata.yaml<\/code> dosyas\u0131nda s\u00f6zdizimi hatalar\u0131 (bo\u015fluklar, yanl\u0131\u015f girintiler). sudo suricata -T -c \/etc\/suricata\/suricata.yaml -i <\/code> komutunu kullanarak kontrol edin.<\/li>\n
            • Yanl\u0131\u015f a\u011f aray\u00fcz\u00fc ad\u0131 belirtilmesi. ip a<\/code> ile do\u011fru aray\u00fcz ad\u0131n\u0131 kontrol edin.<\/li>\n
            • Kural dosyalar\u0131n\u0131n bulunamamas\u0131 veya hatal\u0131 olmas\u0131. suricata-update<\/code> komutunun ba\u015far\u0131l\u0131 oldu\u011fundan ve suricata.yaml<\/code> dosyas\u0131ndaki kural yollar\u0131n\u0131n do\u011fru oldu\u011fundan emin olun.<\/li>\n
            • Yetersiz sistem kaynaklar\u0131 (bellek, CPU).<\/li>\n<\/ul>\n
              Detayl\u0131 hata mesajlar\u0131 i\u00e7in sudo journalctl -u suricata<\/code> veya \/var\/log\/suricata\/suricata.log<\/code> dosyalar\u0131n\u0131 kontrol edin.<\/p>\n
              Suricata’n\u0131n \u00fcretti\u011fi loglar\u0131 ba\u015fka bir sisteme (SIEM) nas\u0131l g\u00f6nderebilirim?<\/h3>\n
              Suricata, olaylar\u0131 JSON format\u0131nda eve.json<\/code> dosyas\u0131na kaydeder. Bu dosya, \u00e7o\u011fu SIEM (Security Information and Event Management) sistemi taraf\u0131ndan kolayca ayr\u0131\u015ft\u0131r\u0131labilir. Loglar\u0131 SIEM’e g\u00f6ndermek i\u00e7in genellikle bir log toplay\u0131c\u0131 ajan (\u00f6rne\u011fin, Filebeat, Fluentd, rsyslog) kullan\u0131rs\u0131n\u0131z. Bu ajan, eve.json<\/code> dosyas\u0131n\u0131 izler ve yeni olaylar\u0131 SIEM’inize iletir.<\/p>\n
              <\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Giri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z?\nG\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k siber tehdit ortam\u0131nda, a\u011f g\u00fcvenli\u011fi her zamankinden daha kritik bi","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-32539","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nGiri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Giri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z?\" \/>\n<meta property=\"og:description\" content=\"Giri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z? G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k siber tehdit ortam\u0131nda, a\u011f g\u00fcvenli\u011fi her zamankinden daha kritik bi\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-10-22T23:42:02+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"14 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Giri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z?\",\"datePublished\":\"2025-10-22T23:42:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/\"},\"wordCount\":2406,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/\",\"name\":\"Giri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-10-22T23:42:02+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Giri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Giri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/","og_locale":"tr_TR","og_type":"article","og_title":"Giri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z?","og_description":"Giri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z? G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k siber tehdit ortam\u0131nda, a\u011f g\u00fcvenli\u011fi her zamankinden daha kritik bi","og_url":"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-10-22T23:42:02+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"14 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Giri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z?","datePublished":"2025-10-22T23:42:02+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/"},"wordCount":2406,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/","url":"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/","name":"Giri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-10-22T23:42:02+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/giris-suricata-nedir-ve-neden-kullanmalisiniz\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Giri\u015f: Suricata Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z?"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/32539","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=32539"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/32539\/revisions"}],"predecessor-version":[{"id":32540,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/32539\/revisions\/32540"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=32539"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=32539"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=32539"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}