Open Information Security Foundation

12/07/2011

02:18 PM Suricata Feature #250: Support for Unix Socket

# +Updated patch+ to use @strlcpy@
# +Tested functionality+ of stream and dgram fast log on production system
<pr... Mike Pomraning

12/06/2011

03:59 PM Suricata Feature #250: Support for Unix Socket

Updated patch for AF_UNIX sockets, both dgram and stream. *Note that I can't test it right now* - my test environmen... Mike Pomraning

09/20/2011

11:00 PM Suricata Feature #330 (Closed): Rule efficiency: always attempt PCRE_NO_AUTO_CAPTURE

This change attempts PCRE_NO_AUTO_CAPTURE on all unnamed capture groups, as if ?: had been specified for all groups, ... Mike Pomraning

09/18/2011

11:31 PM Suricata Bug #309: Mitigate dangerous macros: util-mem.h, decode.h, suricata.h, stream-tcp.c

Re-attaching updated patch. Mike Pomraning

08/08/2011

04:35 PM Suricata Bug #310 (Closed): Fix thread exit stats for pcap (unsigned int overflow)

The attached patch corrects @source-pcap.c:ReceivePcapThreadExitStats()@ report of percent packet loss. This small f... Mike Pomraning

10:43 AM Suricata Support #306: iptables: Unknown error 4294967295

Lambert, I think this is two problems in one.
The first is that _iptables_ doesn't understand the command you're g... Mike Pomraning

08/06/2011

08:03 AM Suricata Bug #309: Mitigate dangerous macros: util-mem.h, decode.h, suricata.h, stream-tcp.c

Updated patch for safe macros: decode.h, defrag.c, flow.c, queue.h, stream-tcp.c, suricata.h, tm-threads.c, util-cud... Mike Pomraning

08/04/2011

10:51 PM Suricata Bug #309 (Closed): Mitigate dangerous macros: util-mem.h, decode.h, suricata.h, stream-tcp.c

The attached patches address several unsafe or broken macros in 1.1beta2 (rev 2f2eb72)
# SCStrdup with -DDBG_MEM_A... Mike Pomraning

03/24/2011

01:26 PM Suricata Feature #250: Support for Unix Socket

> It may help to ignore SIGPIPE [...] This is only an issue with STREAM.
> Alternately you can move to DGRAM but the... Mike Pomraning

03/15/2011

09:36 PM Suricata Feature #250: Support for Unix Socket

Vivek Rajagopalan wrote:
> Hi Mike,
>
> I will also check out this patch tomorrow. Is your patch compatible with ... Mike Pomraning