Open Information Security Foundation

11/06/2026

AK 04:10 PM Suricata Documentation #9382: dpdk: bonding interface configuration change on DPDK 23.11

It should target main. Also older versions are affected.
The PR link: https://github.com/OISF/suricata/pull/16602 Adam Kiripolsky

AK 12:17 PM Suricata Documentation #9382 (In Review): dpdk: bonding interface configuration change on DPDK 23.11

Adam Kiripolsky

AK 12:07 PM Suricata Documentation #9382 (In Review): dpdk: bonding interface configuration change on DPDK 23.11

DPDK 23.11 changed keywords for configuring the bonding interface from "slave/master" to "member/main".
Suricata documentation for DPDK contains only the older version.
DPDK change notes:
https://doc.dpdk.org/guides/rel_notes/releas... Adam Kiripolsky

07/20/2026

AK 12:27 PM Suricata Feature #7871: dpdk: rte_flow capture bypass

Add suricata.yaml used in the benchmarks. Adam Kiripolsky

07/19/2026

AK 10:56 PM Suricata Feature #7871: dpdk: rte_flow capture bypass

Add configuration files and PCAPs for benchmarks in https://github.com/OISF/suricata/pull/15877 Adam Kiripolsky

07/02/2026

AK 02:32 PM Suricata Bug #8710 (Closed): flow-manager: no flow timeout with flow.hash-size < 10

Due to a rounding calculation in *flow-manager.c*, the variable *rows_per_sec* was set to 0 in the case of flows.hash-size < 10.
This caused Flow Manager to not time out any flows during Suricata runtime.
The fix proposes to ensure the... Adam Kiripolsky

AK 01:28 PM Suricata Bug #8704 (Closed): af-packet: eBPF map location error never printed

The flag *g_flowv4_ok* in source-af-packet.c is never set to false, due to how logically structured the adjacent condition is.
The bug caused the error message to never be printed by any thread Adam Kiripolsky

AK 08:16 AM Suricata Bug #8699 (In Review): af-packet: XDP bypass VLAN byte order

Adam Kiripolsky

07/01/2026

AK 10:44 AM Suricata Bug #8699 (Closed): af-packet: XDP bypass VLAN byte order

The XDP filter *xdp_filter.c* incorrectly bypasses packets when VLAN_TRACKING is enabled.
The VLAN tag is extracted in the wrong byte order, resulting in the bypass being applied to packets with a different real VLAN tag.
This issu... Adam Kiripolsky

06/12/2026

AK 11:45 PM Suricata Bug #8442: capture-bypass: worker timeout of flows causes statistics inconsistencies

h1. Reproducibility test
I used Suricata in **AF_PACKET** runmode with **EBPF** bypass.
To see the results more clearly, I have created a test branch: https://github.com/adaki4/suricata/tree/reproduce-wrong-worker-bypass-stats-v1
... Adam Kiripolsky