Open Information Security Foundation

03/20/2026

AA 05:21 PM Suricata Feature #8385: datasets: add support for subdomain match

v2: https://github.com/OISF/suricata/pull/15073 Antoine abf

03/18/2026

AA 04:23 PM Suricata Feature #8385: datasets: add support for subdomain match

https://github.com/OISF/suricata/pull/15058 Antoine abf

AA 04:22 PM Suricata Feature #8385 (In Review): datasets: add support for subdomain match

*Problem*
There is currently no way to use datasets to block a domain and all its subdomains. The existing @domain;@ transform extracts the registrable domain (eTLD+1), which is useful for normalization but not for subdomain-level block... Antoine abf

02/24/2026

AA 12:51 PM Suricata Bug #8318 (Closed): ndpi: crashing in StorageGetById()

*Environment*
- Suricata 8.0.2 + nDPI 4.14
- AArch64 / NixOS
After applying the fix from https://github.com/OISF/suricata/pull/14847, Suricata still crashes with SIGSEGV in StorageGetById. The crash now occurs in OnFlowUpdate and po... Antoine abf

02/19/2026

AA 02:15 PM Suricata Bug #8308: plugins/ndpi: SIGSEGV in DetectnDPIProtocolPacketMatch

Thank you for the quick fix! https://github.com/OISF/suricata/pull/14847 runs successfully.
However, I'm not sure how to replicate the crash condition. The SIGSEGV was intermittent, sometimes crashing continuously, other times running... Antoine abf

AA 12:12 PM Suricata Bug #8308: plugins/ndpi: SIGSEGV in DetectnDPIProtocolPacketMatch

Thanks for the quick response. I tried building https://github.com/OISF/suricata/pull/14846 but it fails to compile: Antoine abf

02/18/2026

AA 07:24 PM Suricata Bug #8308 (Closed): plugins/ndpi: SIGSEGV in DetectnDPIProtocolPacketMatch

I've been running Suricata 8.0.2 with nDPI in NFQ/IPS mode and the behavior is inconsistent. Sometimes it crashes repeatedly every ~2-5 minutes, other times it runs for days without any issues.
*Environment:*
- Suricata 8.0.2 + nDPI ... Antoine abf