Open Information Security Foundation

04/24/2025

07:13 AM Suricata Feature #7674 (New): xdp: possibility to bypass encapsulated flows

The ebpf xdp_filter.c program does not handle encapsulated flows (with erspan, VXLAN, or some other tunnel)
But it c... Philippe Antoine

04/23/2025

06:44 PM Suricata Bug #7668 (Closed): http: lack of setting updated_ts leads to firewall bypass

Philippe Antoine

06:44 PM Suricata Bug #7670 (Closed): http: lack of setting updated_ts leads to detection delay (7.0.x backport)

https://github.com/OISF/suricata/pull/13066 Philippe Antoine

02:17 PM Suricata Bug #5739: htp: handle alloc failure for user data

https://github.com/OISF/suricata/pull/13078 was a follow up Philippe Antoine

04/22/2025

06:29 PM Suricata Bug #6173: http: loss of backward compatibility in HTTP logs from v6 to v7

Is there anything to do here @regit ? Now that 6 is EOL... Philippe Antoine

06:24 PM Suricata Support #7457: Resolving Multi-Packet HTTP Request Handling Issues in Suricata IPS Mode

I think this is now (in suricata 8 beta1) supported through firewall use case, see https://docs.suricata.io/en/latest... Philippe Antoine

06:22 PM Suricata Documentation #7143 (Closed): doc: legacy keyword http_host used in examples

https://github.com/OISF/suricata/pull/13017 Philippe Antoine

06:20 PM Suricata Bug #5739 (Closed): htp: handle alloc failure for user data

Philippe Antoine

06:19 PM Suricata Bug #5739 (Resolved): htp: handle alloc failure for user data

https://github.com/OISF/suricata/pull/13069 Philippe Antoine

02:49 PM Suricata Feature #7672 (New): detect/transforms: subslice transform

Many keyword use offset and bytes
We could make it more generic with a subslice transform that would take a subsli... Philippe Antoine