https://redmine.openinfosecfoundation.org/https://redmine.openinfosecfoundation.org/favicon.ico?17011170022012-08-29T08:25:29ZOpen Information Security FoundationSuricata - Optimization #536: share ctx for filemd5 keyword if identical files are usedhttps://redmine.openinfosecfoundation.org/issues/536?journal_id=21232012-08-29T08:25:29ZVictor Julienvictor@inliniac.net
<ul><li><strong>Subject</strong> changed from <i>filemd5 </i> to <i>share ctx for filemd5 keyword if identical files are used</i></li><li><strong>Status</strong> changed from <i>New</i> to <i>Assigned</i></li><li><strong>Assignee</strong> set to <i>Victor Julien</i></li><li><strong>Target version</strong> set to <i>TBD</i></li></ul><p>Yeah had noticed the same, will address this at some point.</p> Suricata - Optimization #536: share ctx for filemd5 keyword if identical files are usedhttps://redmine.openinfosecfoundation.org/issues/536?journal_id=35572013-10-25T05:29:35ZVictor Julienvictor@inliniac.net
<ul><li><strong>Target version</strong> changed from <i>TBD</i> to <i>2.0beta2</i></li></ul> Suricata - Optimization #536: share ctx for filemd5 keyword if identical files are usedhttps://redmine.openinfosecfoundation.org/issues/536?journal_id=37062013-11-05T06:38:06ZVictor Julienvictor@inliniac.net
<ul><li><strong>Target version</strong> changed from <i>2.0beta2</i> to <i>2.0rc1</i></li></ul> Suricata - Optimization #536: share ctx for filemd5 keyword if identical files are usedhttps://redmine.openinfosecfoundation.org/issues/536?journal_id=37662013-11-14T12:10:08ZVictor Julienvictor@inliniac.net
<ul><li><strong>Tracker</strong> changed from <i>Bug</i> to <i>Optimization</i></li></ul> Suricata - Optimization #536: share ctx for filemd5 keyword if identical files are usedhttps://redmine.openinfosecfoundation.org/issues/536?journal_id=40312014-02-06T05:57:20ZVictor Julienvictor@inliniac.net
<ul><li><strong>Target version</strong> changed from <i>2.0rc1</i> to <i>3.0RC2</i></li></ul><p>Wondering if we could perhaps create more generic sharing between keywords. Currently if we see content:"abc"; and then in another rule also content:"abc"; we have the same thing in memory twice.</p> Suricata - Optimization #536: share ctx for filemd5 keyword if identical files are usedhttps://redmine.openinfosecfoundation.org/issues/536?journal_id=47452014-11-05T04:50:26ZVictor Julienvictor@inliniac.net
<ul><li><strong>Target version</strong> changed from <i>3.0RC2</i> to <i>70</i></li></ul> Suricata - Optimization #536: share ctx for filemd5 keyword if identical files are usedhttps://redmine.openinfosecfoundation.org/issues/536?journal_id=79222017-02-10T05:28:37ZVictor Julienvictor@inliniac.net
<ul><li><strong>Status</strong> changed from <i>Assigned</i> to <i>New</i></li><li><strong>Assignee</strong> changed from <i>Victor Julien</i> to <i>OISF Dev</i></li><li><strong>Target version</strong> changed from <i>70</i> to <i>TBD</i></li></ul> Suricata - Optimization #536: share ctx for filemd5 keyword if identical files are usedhttps://redmine.openinfosecfoundation.org/issues/536?journal_id=99562018-07-17T08:27:52ZVictor Julienvictor@inliniac.net
<ul><li><strong>Effort</strong> set to <i>low</i></li><li><strong>Difficulty</strong> set to <i>medium</i></li></ul> Suricata - Optimization #536: share ctx for filemd5 keyword if identical files are usedhttps://redmine.openinfosecfoundation.org/issues/536?journal_id=99572018-07-17T08:28:04ZVictor Julienvictor@inliniac.net
<ul><li><strong>Assignee</strong> changed from <i>OISF Dev</i> to <i>Anonymous</i></li></ul> Suricata - Optimization #536: share ctx for filemd5 keyword if identical files are usedhttps://redmine.openinfosecfoundation.org/issues/536?journal_id=111662019-02-23T22:09:47ZAndreas Herzoisf@herzandreas.de
<ul><li><strong>Assignee</strong> set to <i>Community Ticket</i></li></ul>