Open Information Security Foundation

08/07/2024

01:31 PM Suricata Bug #7179: Capture Kernel Drops happen when data transferring inside the intranet

Please close this thread as the problem is solved by changing the settings in suricata.yaml. Samiux A

07/27/2024

02:52 PM Suricata Bug #7179: Capture Kernel Drops happen when data transferring inside the intranet

I have a NextCloud machine in the network. When I paste a file (size 7.6MB) to the NextCloud directory via Linux fil... Samiux A

02:05 PM Suricata Bug #7179: Capture Kernel Drops happen when data transferring inside the intranet

How to get such data? Get from the stats.log? Samiux A

09:32 AM Suricata Bug #7179: Capture Kernel Drops happen when data transferring inside the intranet

It is because it only happens when the large data (for example, 10Mb) exchange between machines in the intranet. It ... Samiux A

12:34 AM Suricata Bug #7179 (New): Capture Kernel Drops happen when data transferring inside the intranet

Mode : IDS with af-packet
Suricata : 7.0.6 and below with hyperscan
OS : Debian 12.x
Capture Kernel Drops only h... Samiux A

05/18/2024

10:53 AM Suricata Bug #7003: Suspected memory leak after Suricata binary is updated or upgraded

Please close this thread as I misconfigured the Suricata. There is no such problem. Thanks a lot. Samiux A

05/02/2024

09:30 AM Suricata Bug #7003 (Rejected): Suspected memory leak after Suricata binary is updated or upgraded

When Suricata binary is updated or upgraded, the memory consumption is more than a double, e.g. memory used 1.8gb (be... Samiux A

02/10/2024

06:23 AM Suricata Bug #6760: Hugepages Error for ARM64 and af-packet IPS mode

It seems that after the device is rebooted, the warning message gone. Samiux A

02/08/2024

06:30 PM Suricata Bug #6760: Hugepages Error for ARM64 and af-packet IPS mode

The directory of /sys/devices/system/ is :
clockevents clocksource container cpu
The directory of /sys/devic... Samiux A

06:17 PM Suricata Bug #6760 (Closed): Hugepages Error for ARM64 and af-packet IPS mode

Suricata 7.0.3
Debian 12.x
CPU : ARM64 - 8 cores
af-packet IPS mode
I got the following error message :
[220... Samiux A