Open Information Security Foundation

04/19/2013

01:05 PM Suricata Bug #788: file_data relative positive and negative match at same offset problem

this sig should not ring here because there is not a "CU" depth:2; at file_data... Pedro Marinho

03/25/2013

11:25 AM Suricata Bug #788: file_data relative positive and negative match at same offset problem

the pcap where it should ring Pedro Marinho

11:22 AM Suricata Bug #788 (Closed): file_data relative positive and negative match at same offset problem

Hello Gentlemen,
I've built this signature last week. It is generating an alert where it shouldn't False Positive.... Pedro Marinho

05/30/2012

07:32 AM Suricata Bug #474: suricata and libhtp FN problem

Gentlemen,
With http_raw_header did work. Sorry about the noise i thought something was wrong with the libhtp pars... Pedro Marinho

05/29/2012

02:49 PM Suricata Bug #474: suricata and libhtp FN problem

actually the problem is here
// Ignore LWS before field-content
while ((value_start < len) && (htp_is_lws(da... Pedro Marinho

02:45 PM Suricata Bug #474 (Closed): suricata and libhtp FN problem

Hello Gentlemen,
I am having a problem with suricata not recognizing legit http because htplib does take in accoun... Pedro Marinho

04/24/2012

05:15 PM Suricata Bug #456 (Closed): Suricata CoreDump with a rule with two byte_extract keywords

#uname -a
Linux 2.6.27.41-170.2.117.fc10.i686 #1 SMP Thu Dec 10 11:00:29 EST 2009 i686 i686 i386 GNU/Linux
#signa... Pedro Marinho