Open Information Security Foundation

05/19/2020

02:52 PM Suricata Bug #3705: VarNameStoreLookupById: Assertion `!(current == ((void *)0))'

It appears I've zeroed in on the problem:
As before it appears that `DetectEngineReload` function doesn't support ... Justin Ossevoort

02:34 PM Suricata Bug #3705: VarNameStoreLookupById: Assertion `!(current == ((void *)0))'

Some further puzzle pieces:
* The `DetectEngineReload function appears to want only support non DETECT_ENGINE_MT_S... Justin Ossevoort

01:03 PM Suricata Bug #3705: VarNameStoreLookupById: Assertion `!(current == ((void *)0))'

I've been running Suricata in gdb some more:
* Around reload the new `DetectEngineCtx` allocate a new "VarNameStor... Justin Ossevoort

11:31 AM Suricata Bug #3705: VarNameStoreLookupById: Assertion `!(current == ((void *)0))'

Justin Ossevoort wrote in #note-2:
> My first guess would be that we need either a refcount for the "VarNameStore" t... Justin Ossevoort

11:21 AM Suricata Bug #3705: VarNameStoreLookupById: Assertion `!(current == ((void *)0))'

I'm not claiming any fundamental understanding of the codebase, but it seems the following is happening:
* Suricat... Justin Ossevoort

09:14 AM Suricata Bug #3705: VarNameStoreLookupById: Assertion `!(current == ((void *)0))'

I've run Suricata in gdb with a breakpoint on the `g_varnamestore_current_sc` global variable... Justin Ossevoort

05/18/2020

03:00 PM Suricata Bug #3705 (New): VarNameStoreLookupById: Assertion `!(current == ((void *)0))'

We're trying to use the multi-tenant support in Suricata. In our testsetup we were not having any problems, but tryin... Justin Ossevoort

05/15/2020

06:22 AM Suricata Feature #3701 (Closed): eve: add tenant_id in eve-log for other types than alert

We're in the process of adopting multi-tenant support in Suricata and we've run in to the issue that the tenant_id is... Justin Ossevoort