Open Information Security Foundation

03/01/2016

03:04 AM Suricata Bug #1715: nfq: broken time stamps with recent Linux kernel 4.4

I can confirm that it also works with vanilla kernel 4.4.3. Joachim Schwender

01:40 AM Suricata Bug #1715: nfq: broken time stamps with recent Linux kernel 4.4

Running suricata 3.0 with vanilla kernel 4.4.2 all timestamps are ok in the logs i have in use (dns, fast, stats, sur... Joachim Schwender

02/29/2016

05:16 AM Suricata Bug #1715: nfq: broken time stamps with recent Linux kernel 4.4

Andreas Herz wrote:
> Joachim Schwender wrote:
> > I am not clear waht you mean by system wide time settings?
> > ... Joachim Schwender

02/26/2016

03:14 AM Suricata Bug #1715: nfq: broken time stamps with recent Linux kernel 4.4

Suricata log is the only log file with broken time stamps under the conditions mentioned. Joachim Schwender

03:12 AM Suricata Bug #1715: nfq: broken time stamps with recent Linux kernel 4.4

I am not clear waht you mean by system wide time settings?
we run chrony on all machines, and this one is the time r... Joachim Schwender

02/25/2016

08:19 AM Suricata Bug #1715: nfq: broken time stamps with recent Linux kernel 4.4

on my machine i have the following:
LANG=de_DE.UTF-8
LC_TIME=en_DK.UTF-8
SHELL=/bin/bash
iptable uses NFQUEUE as ... Joachim Schwender

02/22/2016

07:18 AM Suricata Bug #1715: nfq: broken time stamps with recent Linux kernel 4.4

That does not helo. I compiled with --disable-threading-tls booted into kernel 4.4.2 and the log files have broken ti... Joachim Schwender

04:41 AM Suricata Bug #1715: nfq: broken time stamps with recent Linux kernel 4.4

i will do that, it will take some time. Joachim Schwender

12:55 AM Suricata Bug #1715: nfq: broken time stamps with recent Linux kernel 4.4

It is production a debian 7.9, with vanilla Kernel 4.3.3 which was ok, and i tested upgrading to kernel 4.4.0 and 4.... Joachim Schwender

02:51 AM Suricata Optimization #1718 (New): Time stamp in Log files should be ISO 8601 format

Current date string in suricata is only accepted in the USA. In order to consider international use it is generally a... Joachim Schwender