Open Information Security Foundation

08/21/2020

03:40 PM Suricata Feature #3887 (Closed): yaml: Increase maximum size for address vars

It appears the maximum length for an address var is 8192 bytes[0] when dynamically generating lists for vars in large... Duane Howard

05/21/2019

01:52 PM Suricata Bug #2841: False positive alerts firing after upgrade suricata 3.0 -> 4.1.0 (4.1.x)

fwiw, I'm seeing this behavior as well, but it seems extremely difficult to reproduce.
For some reason when I run wi... Duane Howard

01/04/2018

03:26 PM Suricata Bug #2402 (Closed): http_header_names doesn't operate as documented

Not sure if the bug is in implementation, or in the documentation. In the second example of the documentation[0] we l... Duane Howard

07/27/2017

03:20 PM Suricata Bug #2189: PID file removal at shutdown broken on 4.0.0-rc2

friendly ping? Any other data I can provide to help? Duane Howard

07/21/2017

01:35 PM Suricata Bug #2190 (Closed): apparent 1000 character limit in threshold.conf IP lists

something like:
suppress gen_id 0, sig_id 0, track by_src, ip [lots of chars] (see [0])
will elicit an error:
<E... Duane Howard

07/20/2017

01:59 PM Suricata Bug #2189: PID file removal at shutdown broken on 4.0.0-rc2

Could it be a side effect of having another Suricata running (actually sniffing traffic, etc.) at the same time?
To ... Duane Howard

09:58 AM Suricata Bug #2189: PID file removal at shutdown broken on 4.0.0-rc2

In this particular test case, no. It continues running as root, and all commands here are issued as root. Duane Howard

09:48 AM Suricata Bug #2189 (Closed): PID file removal at shutdown broken on 4.0.0-rc2

I can reproduce this behavior on two test machines, two variables in play seem to be a custom pid-file name, and runn... Duane Howard

06/07/2017

09:11 AM Suricata Feature #1675: Support additional runmodes for unix-socket

Sorry Victor,
I didn't see this as I hadn't flagged this to 'watch' on accident.
I'll play with this when we get 3.... Duane Howard

05/24/2017

11:14 AM Suricata Feature #1675: Support additional runmodes for unix-socket

Friendly ping on this. Thoughts? Duane Howard