Open Information Security Foundation

02/25/2022

06:40 PM Suricata Support #4327: Packet loss and high tcp reasembly with upgrade to 5.x

I cannot say for certain at this time, but it seems as though there is improvement. We still do have periods of loss... Eric Urban

04/22/2021

02:41 PM Suricata Support #4327: Packet loss and high tcp reasembly with upgrade to 5.x

We upgraded to 6.0.2 and it reduced the problem significantly compared to 5.x (currently 5.0.6). While we still do h... Eric Urban

02/12/2021

05:38 PM Suricata Support #4327 (Closed): Packet loss and high tcp reasembly with upgrade to 5.x

*Summary*
We experience periods of packet loss at times when using Suricata 5.0.5 that we do not see in a 4.1.8 inst... Eric Urban

11/11/2019

07:20 PM Suricata Support #3320: Signficant packet loss when using Suricata with Rust enabled

I believe I found answer to my question in the previous comment, which is that the SMB2 app-layer parser is disabled ... Eric Urban

03:48 PM Suricata Support #3320: Signficant packet loss when using Suricata with Rust enabled

After making this change we have had 0 drops and the packets between our Rust enabled and non-Rust enabled sensors ha... Eric Urban

11/07/2019

07:20 PM Suricata Support #3320: Signficant packet loss when using Suricata with Rust enabled

Hello Victor, thank you for the prompt response!
I put the config change in place on our test sensor with Rust y... Eric Urban

11/05/2019

09:00 PM Suricata Support #3320 (Closed): Signficant packet loss when using Suricata with Rust enabled

*Summary*
We experience significant packet loss at times with Rust enabled in Suricata. In our environment we have ... Eric Urban

10/10/2019

09:08 PM Suricata Bug #2656: Alerts not triggered under some conditions on traffic containing rule matches

Hello Andreas, you are correct that the 2nd pcap in each group are the ones where I was wondering why they don't trig... Eric Urban

10/09/2019

08:49 PM Suricata Documentation #2470: document content inspection in chunks

Sorry, I must have missed the notification from this issue as I just saw it now when logging into Redmine.
Thank y... Eric Urban

08:01 PM Suricata Bug #3229: Abnormal traffic produces unexpected alerts for traffic that is opposite direction of rule

I forgot to call out specifically that a concern here is not just for alerts that are generated from this type of tra... Eric Urban