Open Information Security Foundation

12/22/2021

06:28 AM Suricata Feature #4321: http2: Support link between packets in the same stream

Test Environment... Jungho Yoon

03/12/2021

12:56 AM Suricata Feature #4321: http2: Support link between packets in the same stream

Philippe Antoine wrote in #note-3:
> I think it is possible to do it with a single signature as a HTTP2 stream is re... Jungho Yoon

03/06/2021

11:11 AM Suricata Feature #4321: http2: Support link between packets in the same stream

txbits seems to be a clearer and better way. Jungho Yoon

02/09/2021

08:12 AM Suricata Feature #4321 (New): http2: Support link between packets in the same stream

There are multiple streams in http2. Since existing flowbits are based on the same flow, it is difficult to detect pr... Jungho Yoon

11/06/2020

09:20 AM Suricata Bug #4096: flow manager: 200% CPU in KVM host with no activity with Suricata 6

Different settings mean that the OS or suricata.yaml are not exactly the same. My case written on the forum was only ... Jungho Yoon

01:17 AM Suricata Bug #4096: flow manager: 200% CPU in KVM host with no activity with Suricata 6

Some settings are different, but it seems to be a similar situation to my case.
https://forum.suricata.io/t/cpu-us... Jungho Yoon

03/26/2020

02:20 PM Suricata Feature #3548 (New): Support GTP(GPRS Tunnelling Protocol).

Add support for GTP(GPRS Tunnelling Protocol) decode and keyword.
http://manual.snort.org/node17.html#SECTION00322... Jungho Yoon

03/12/2020

06:06 AM Suricata Bug #3521: Bypass of Detection Capabilities

Victor Julien wrote in #note-3:
> So are this ticket and #3522 the same issue?
#3509 has a similar problem. Plea... Jungho Yoon

03/01/2020

11:54 PM Suricata Bug #3509: Behavior for tcp fastopen

Oh sorry. The upload file is invalid. Please check the new file. Reading mode was confirmed to be different from the ... Jungho Yoon

02/29/2020

03:14 PM Suricata Bug #3509: Behavior for tcp fastopen

In the reading mode example above, fastopen_segmentation4.pcap and attached fastopen_segmentation.pcap are the same f... Jungho Yoon