Open Information Security Foundation

11/22/2017

02:45 AM Suricata Bug #2288 (Closed): Suricata segfaults on ICMP and flowint check

Using only this rule on Suricata v3.2.3, v4.0.0 and v4.0.1 :
alert icmp any any -> any any (msg:"Dump Core!"; flow... Edward Fjellskål

10/17/2015

04:51 PM Suricata Bug #1522: lua-output problems with pfring

Both the emails from redmine, gmail sent to spamfolder!
Saw this first now.
To answer your question, I would ne... Edward Fjellskål

07/28/2015

03:55 PM Suricata Bug #1522 (Closed): lua-output problems with pfring

Testing "Suricata version 2.1beta4 RELEASE" on Ubuntu 14.04 using afpacket seems to work with lua-output scripts.
... Edward Fjellskål

11/03/2011

05:46 AM Suricata Feature #294: Limit inspection of a stream and/or rule...

From the initial conversation with Victor J on IRC, I was talking about a packet counter and a byte counter, both for... Edward Fjellskål

10/12/2011

06:27 AM Suricata Bug #342 (Closed): Errors compiling with --disable-gccmarch-native

... Edward Fjellskål

06/30/2011

02:18 AM Suricata Feature #294 (Closed): Limit inspection of a stream and/or rule...

I would like to have different rule options to limit inspection of a streams.
Not sure if it would speed up or slo... Edward Fjellskål

01/17/2011

02:55 AM Suricata Bug #271 (Closed): Need for proper option for testing a setup

When distributing a set of binary,configuration files and rules, it is convenient to have a way to test the setup bef... Edward Fjellskål

12/30/2010

09:44 AM Suricata Bug #267: Problem with [ipvars] in icmp rule

ohhh... crapz.... sårry with a big O...
For some reason, my interface reverted to not the one that I really use, s... Edward Fjellskål

05:32 AM Suricata Bug #267 (Rejected): Problem with [ipvars] in icmp rule

Trying out:
alert icmp $HOME_NET any -> [8.8.4.4,8.8.8.8] any (msg:"IDS is alive - ping google-dns test signature";... Edward Fjellskål

12/28/2010

12:09 AM Suricata Bug #264 (Closed): No payload for http alert data.

The http_* keywords use the http state which is working on top of the stream engine.
It currently works on ACK'd dat... Edward Fjellskål