Open Information Security Foundation

10/29/2024

03:31 PM Suricata Feature #7354 (New): detect: reimplement ip-only as a per group prefilter

Currently IP-only rules are processed separately from the "regular" rules, leading to some unexpected behavior around... Victor Julien

10/28/2024

07:22 AM Suricata Bug #7346: eve/fileinfo: sha256 should not be logged on incomplete file

If we stored a file, it will be stored with the partial hash as the file name. So it should be logging that file name... Victor Julien

10/23/2024

11:57 AM Suricata Support #7340: AF_PACKET Set BPF problem

Does the traffic come from a real interface? If so, then the various offloads need to be disabled on that interface a... Victor Julien

10/21/2024

09:27 AM Suricata Bug #4499: Sudden and enormous memory leak

Possibly by #4580 and/or #5712 Victor Julien

10/17/2024

01:46 PM Suricata Task #7336 (New): Suricon 2024 brainstorm

Victor Julien

04:32 AM Suricata Bug #7332: tls: fix duplicate EVE field issuerdn

Does 7 have this issue as well? Victor Julien

10/11/2024

07:32 AM Suricata Feature #7322: ability to negate the existence of fields via buffer negation

I think this is a duplicate of #2224, which is in development currently. You can perhaps test and give feedback on ht... Victor Julien

10/04/2024

02:24 PM Suricata Feature #6453: Support DNS over TLS

We need test cases of decrypted pcaps. We suspect things will JustWork(tm) Victor Julien

10/03/2024

09:11 AM Suricata Optimization #7297: Remove duplicate function declarations

Nancy Enos wrote in #note-1:
> Hey, please add me as developer so i can claim this issue..i have set up suricata
... Victor Julien

08:17 AM Suricata Bug #7296: detect: transform base64 creates a 0-sized variable-length array

How do we end up with a 0 byte input btw? Victor Julien