Open Information Security Foundation

12/20/2024

02:48 PM Suricata Bug #7279 (Closed): dns: protocol detection is not strict enough

https://github.com/OISF/suricata/pull/11870 Philippe Antoine

02:47 PM Suricata Optimization #7358 (Closed): CI: only run CodeQL python if the PR contains changed files that are python

https://github.com/OISF/suricata/pull/12298 Philippe Antoine

12/19/2024

08:40 PM Suricata Optimization #7304: Better support multi-protocol keywords

I think DCERPC over SMB and DNS over HTTP are the same logically, even if not in Suricata code... Philippe Antoine

02:45 PM Suricata Feature #7471: detect/ldap: add ldap.bind.name keyword

Should we restrict to bind operation or have all operations but look for all LDAPDN ? Philippe Antoine

02:43 PM Suricata Feature #7471 (New): detect/ldap: add ldap.bind.name keyword

Which is a buffer
We should also investigate if
@pub struct LdapDN(pub String);@ is right because this means we ... Philippe Antoine

02:38 PM Suricata Feature #7470 (New): detect: add ldap.bind.version keyword

Philippe Antoine

10:41 AM Suricata Bug #7469: smtp: recognize when client initiated TLS

Because the probing parser wants to take care of FTP IIRC Philippe Antoine

10:36 AM Suricata Bug #7469 (In Progress): smtp: recognize when client initiated TLS

https://github.com/OISF/suricata/pull/12307 Philippe Antoine

10:22 AM Suricata Bug #7469 (In Progress): smtp: recognize when client initiated TLS

Philippe Antoine

12/18/2024

09:11 PM Suricata Bug #7449: app-layer metadata does not get logged for stream rules and unidirectional protocols

App-layer metadata does not get logged for stream rules and unidirectional protocols :
This was highlighted by SV ... Philippe Antoine