Open Information Security Foundation

02/19/2018

04:39 AM Suricata Bug #2435: Suricata 4.0.3 in IPS mode seems to discard some DNS requests

After the upgrade to suricata 4.0.4 problem still persist:
19/2/2018 -- 11:36:36 - <Notice> - This is Suricata ver... Dan Rimal

04:21 AM Suricata Bug #2435: Suricata 4.0.3 in IPS mode seems to discard some DNS requests

When i set on the client in the /etc/resolv.conf... Dan Rimal

02/14/2018

03:12 AM Suricata Bug #2435: Suricata 4.0.3 in IPS mode seems to discard some DNS requests

Dig works well, even when run A and AAAA query almost together, with the same sport (as ssh client does):... Dan Rimal

02/13/2018

06:18 AM Suricata Bug #2435: Suricata 4.0.3 in IPS mode seems to discard some DNS requests

Hello,
I have just made simple test rig on latest Fedora (4.14.16-300.fc27.x86_64) with suricata:... Dan Rimal

02/09/2018

07:17 AM Suricata Bug #2435: Suricata 4.0.3 in IPS mode seems to discard some DNS requests

So,
1) without queue balance -> bug still persist
2) disabled DNS app-layer -> bug still persist
Verify:
... Dan Rimal

04:43 AM Suricata Bug #2435: Suricata 4.0.3 in IPS mode seems to discard some DNS requests

There is a relevant part of quite tricky set of rules (~1000). There are two routing tables, two wan and so on. But I... Dan Rimal

02/05/2018

10:16 AM Suricata Bug #2435 (Closed): Suricata 4.0.3 in IPS mode seems to discard some DNS requests

Suricata 4.0.3 on Centos 7.2 and kernel 4.4.29 (COS7 elrepo LT) have the very same problem like this closed bugs:
... Dan Rimal