Open Information Security Foundation

03/12/2013

04:55 AM Suricata Feature #776 (Assigned): rules: Add smtp_envelope and smtp_header keywords

Add smtp_envelope and smtp_header keywords.
The envelope is composed of communication before the DATA segment ( ex... David André

11/27/2012

02:14 PM Suricata Feature #641 (Closed): Flowbits group for ORing

As described on http://blog.snort.org/2012/05/two-things-you-should-know-about-snort.html David André

09/10/2012

03:46 AM Suricata Feature #550 (Closed): Extract file attachments from FTP

Extract files from FTP streams to be processed with filestore David André

03:18 AM Suricata Feature #549 (Closed): Extract file attachments from emails

Extract file attachments from emails for the filestore keyword David André

03:09 AM Suricata Optimization #548 (New): Use bloomfilter for filemd5

To reduce memory usage, use bloom filters.
Background:
"Bloom filters are very memory efficient probabilistic da... David André

07/26/2012

02:04 PM Suricata Feature #511 (New): Port indepedent protocol identification (nDPI)

nDPI open-source GPL library allows to detect the protocol no matter what port is used.
It could be used to implem... David André