Open Information Security Foundation

10/30/2024

10:08 AM Suricata Optimization #7352: Remove disable-hashing command line option

Also disable-hashing is incomplete : hassh, quic cyu, datasets and more use hashes and are not disabled by the option Philippe Antoine

10:06 AM Suricata Optimization #7352 (In Review): Remove disable-hashing command line option

https://github.com/OISF/suricata/pull/12055 Philippe Antoine

10/29/2024

07:35 PM Suricata Optimization #7358 (New): CI: only run CodeQL python if the PR contains changed files that are python

So as not to waste too many resources Philippe Antoine

12:49 PM Suricata Optimization #7353 (New): Remove deprecated force-md5 config option

in util-file.c Philippe Antoine

12:37 PM Suricata Optimization #7352 (In Review): Remove disable-hashing command line option

It comes from f723dc1309a793f6fbcf81d6507fe946b4caa04a :
> The idea with a flag to disable hashing is to provide ... Philippe Antoine

10/27/2024

07:37 PM Suricata Optimization #945: remove useless includes

https://github.com/OISF/suricata/pull/12019#issuecomment-2435298380 to explore ? Philippe Antoine

07:25 PM Suricata Bug #7346: eve/fileinfo: sha256 should not be logged on incomplete file

not sure, I vaguely remember someone showing some benefit for the current behavior... Philippe Antoine

07:12 PM Suricata Optimization #7297 (In Progress): Remove duplicate function declarations

Cool, but it looks like there are still some remaining :
AppLayerDecoderEventsFreeEvents
PrefilterGenericMpmFrameRe... Philippe Antoine

10/23/2024

07:48 PM Suricata Feature #3958: enip: convert protocol parser to rust

https://github.com/OISF/suricata/pull/11981 small follow up Philippe Antoine

07:41 PM Suricata Bug #7323: mqtt: wrong and missing direction for keywords

> > allows to have more alerts for SV test about unsub
>
> What do you mean? Adding your changes and re-running S-... Philippe Antoine