Open Information Security Foundation

01/10/2022

07:54 AM Suricata Bug #4945 (Closed): smb: excessive CPU utilization and higher packet processing latency due to excessive calls to Vec::extend_from_slice()

This issue is related to https://redmine.openinfosecfoundation.org/issues/4842 and possibly https://redmine.openinfos... Srini J

11/30/2021

02:04 PM Suricata Bug #4842: smb: excessive memory use during file transfer

Thank you for the analysis Victor. Is there a work around for this issue in Suricata (other than disabling SMB in Sur... Srini J

11/20/2021

04:01 AM Suricata Bug #4842: smb: excessive memory use during file transfer

Commands used to compile and install jemalloc-5.2.1 on the system running Suricata
cd /home/user/source/jemalloc-5.2... Srini J

11/19/2021

08:37 PM Suricata Bug #4842: smb: excessive memory use during file transfer

Including the used Suricata config.yaml as well for easy reference. Srini J

08:19 PM Suricata Bug #4842: smb: excessive memory use during file transfer

Yes the memory increase did seem to happen with the pcap using the -r option as well. Used jemalloc to confirm the al... Srini J

06:39 PM Suricata Bug #4842: smb: excessive memory use during file transfer

Hello Victor.
Have sent you a OneDrive link. The md5sum of the file for reference.
md5sum /var/log... Srini J

04:23 PM Suricata Bug #4842: smb: excessive memory use during file transfer

Hello Victor, Please let me know the preferred way to share the file. It's a 412Mb file (it's a pcap of the partial f... Srini J

02:50 PM Suricata Bug #4842 (Closed): smb: excessive memory use during file transfer

Run away memory allocations in Suricata-6.0.3 at suricata::filetracker::FileTransferTracker::update()->::extend() w... Srini J

10/28/2021

03:43 AM Suricata Bug #4096: flow manager: 200% CPU in KVM host with no activity with Suricata 6

Since this issue is related to KVM and usleep(). Please check if tweaking KVM module parameter halt_poll_ns helps.
... Srini J

06/24/2021

10:13 AM Suricata Support #4544: Suricata 4.1.6 crashes while handling SMB traffic

Thank you for the update Victor. Sure we do have a plan on upgrading to version 5
Regards,
Srini Srini J