Project

General

Profile

Actions

Support #2777

closed

Suricata possibly stopping browsing to a single website

Added by Leonard Jacobs over 5 years ago. Updated almost 5 years ago.

Status:
Closed
Priority:
Normal
Affected Versions:
Label:

Description

The problem is https://www.acuia.org does not work all the time unless all the rules are disabled or even partially disabled. Even then it is intermittently working or not working when some of the rule sets are enabled. It appears to be the only website with a problem. The website spins and never come up most of the time using IE11, Firefox, and Chrome. If Suricata is turned off, the website works. Appears to be the only website with the problem. Upgraded to 4.0.6 from 4.0.4 but the problem is still exists. Suricata configured in af-packet mode. Tried creating a threshold suppress on the public IP address of the website but that did not fix the problem. The suricata.yaml file has already been submitted to Peter Manev and others.

Commented out the Buffer-Size in af-packet setting but that did not fix the problem.

Actions

Also available in: Atom PDF