Open Information Security Foundation

10/11/2019

01:45 PM Suricata Documentation #2470: document content inspection in chunks

FYI,
Looking at the c file, the underscores need to be changed to hyphens in the documentation. Andreas example is ... Brian Jones

01:11 PM Suricata Support #3233 (Closed): Advice to enable SCLogDebug vs SCLogConfig output

Using this link as a guide, https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Unit_Tests
It doesn't s... Brian Jones

10/09/2019

01:08 PM Suricata Support #3214: suspicious domains when googling for suricata information.

Andreas Herz wrote:
> I can't confirm that. Did you try it on another machine as well? This can also be caused by ma... Brian Jones

10/03/2019

07:23 PM Suricata Feature #3192: POC advice for adding support for

After a lot of reading, bpf_map_lookup_elem looks really useful. Naive question.. On a POC IPS system with one rule, ... Brian Jones

06:07 PM Suricata Support #3214 (Closed): suspicious domains when googling for suricata information.

Has anyone noticed suspicious domains when you google for suricata info? Of the 3 that I clicked on, all of them have... Brian Jones

09/25/2019

01:58 PM Suricata Feature #3192: POC advice for adding support for

Andreas Herz wrote:
> So you want to extend suricata to support that use case or do you want to use suricata in comb... Brian Jones

09/24/2019

02:10 PM Suricata Feature #3192: POC advice for adding support for

Brian Jones wrote:
> Posting anyway..
> The pi-hole project has a cool new feature coming that will support whiteli... Brian Jones

02:08 PM Suricata Feature #3192: POC advice for adding support for

Posting anyway..
The pi-hole project has a cool new feature coming that will support whitelisting 100+ million domai... Brian Jones

01:02 PM Suricata Feature #3192: POC advice for adding support for

Sorry, premature click of the enter key. Don't see a way to delete this. Please send help. Brian Jones

12:58 PM Suricata Feature #3192 (New): POC advice for adding support for

https://www.joesandbox.com/analysis/177027/0/html
Connects to IPs without corresponding DNS lookups Brian Jones