Open Information Security Foundation

11/27/2018

01:47 PM Suricata Optimization #2687: current suricata.yaml is missing rotate-interval "example"

I do agree that a too big configuration file, do tend to be a bit intimidating, but then again I also like to know al... Mikael Keri

11/16/2018

08:11 PM Suricata Optimization #2687 (New): current suricata.yaml is missing rotate-interval "example"

I noticed that the current (4.1) docs describes the usage of eve-log rotation, "rotate-interval" (https://suricata.re... Mikael Keri

11/15/2018

07:40 AM Suricata Feature #2150: Support for attaching Suricata to multiple NFQ's using the default startup script

As 4.1 has this feature included, I think you can go ahead and close this case Mikael Keri

04/20/2018

07:13 AM Suricata Bug #2494 (Closed): Invalid Base64 payload for filemd5 alerts

Per previous conversation, Peter suggested that I open a new one for this issue.
Summary of the issue: While using... Mikael Keri

04/17/2018

01:03 PM Suricata Bug #2483: filemd5 rule blocks/alerts on files not in the list ..

Thank you Peter for getting back to me!
As I mention, I did see this kind of behaviour for a while without getting... Mikael Keri

04/12/2018

12:41 PM Suricata Bug #2483 (Closed): filemd5 rule blocks/alerts on files not in the list ..

I have been trying to debug this issue for a while, but so far I'm have not been able to pinpoint the root cause, so ... Mikael Keri

04/04/2018

08:57 AM Suricata Feature #2150: Support for attaching Suricata to multiple NFQ's using the default startup script

@Peter I have tested and verified the new update using the CUSTOM variable and it works fine, thanks! Mikael Keri

10/06/2017

06:27 AM Suricata Feature #2200: Dynamically add md5 to blacklist without full restart

As there no up vote functionality, I will add this comment instead. I would also like to see this being implemented, ... Mikael Keri

08/01/2017

06:49 AM Suricata Feature #2196 (Closed): Add flow_id to the file extracted .meta file

To enable easier mappings of extracted files and connected alerts I suggest adding the field "flow_id" to the corresp... Mikael Keri

06/26/2017

02:35 AM Suricata Feature #2150: Support for attaching Suricata to multiple NFQ's using the default startup script

@Peter The new settings were easily applied and works as expected. Thank you! If you need more feedback please let m... Mikael Keri