General

Profile

Michal Purzynski

  • Login: michal
  • Registered on: 03/28/2018
  • Last connection: 02/13/2020

Issues

open closed Total
Assigned issues 1 0 1
Reported issues 2 2 4

Projects

Project Roles Registered on
Suricata Developer 11/21/2018
Suricata-Update Developer 11/21/2018

Activity

02/13/2020

10:42 AM Suricata Bug #3342: Suricata 5.0 crashes while parsing SMB data
Victor Julien wrote:
> Michal, are you still seeing this with the current master or master-5.0.x branch?
I can te...
Michal Purzynski

11/20/2019

10:22 PM Suricata Bug #3342: Suricata 5.0 crashes while parsing SMB data
After 30+ hours Suricata crashed again, here's what ASAN reported (not much, to be honest)... Michal Purzynski

11/19/2019

06:58 AM Suricata Bug #3342: Suricata 5.0 crashes while parsing SMB data
Victor Julien wrote:
> Thanks Michal. This crash happens during cleanup after the flow has timed out. I strongly sus...
Michal Purzynski
12:10 AM Suricata Bug #3342: Suricata 5.0 crashes while parsing SMB data
What I see around this time (with Zeek's flow logs and parsed SMB data) is
- there's a couple of connections betwe...
Michal Purzynski

11/18/2019

11:50 PM Suricata Bug #3342 (Assigned): Suricata 5.0 crashes while parsing SMB data
From a couple of days Suricata 5.0 has been crashing on a regular basis, around the same time. We finally got the cor... Michal Purzynski

10/17/2019

12:01 AM Suricata Support #3252 (New): Matching a long list of tls.fingerprint fields is extremly CPU intensive
The suricata-update script comes with some useful rule sources, like the sslbl.abuse.ch.
It is basically around 30...
Michal Purzynski

10/16/2019

08:16 AM Suricata Support #2725: stream/packet on wrong thread
> What do you mean by ATR disabled and nothing in flow rules in detail?
ATR is Intel's Application Targeted Routin...
Michal Purzynski

07/17/2019

11:41 PM Suricata Support #2725: stream/packet on wrong thread
One more thing - what's the hash that RPS uses? There are two hashes and the cluster_flow computation does not update... Michal Purzynski
10:21 PM Suricata Support #2725: stream/packet on wrong thread
To be honest, the X710, cluster_qm with the low entropy hash and the RSS hashing (ATR disabled, nothing in flow rules... Michal Purzynski

03/28/2018

12:13 AM Suricata Bug #2469 (Closed): The autoconf script throws and error when af_packet is enabled and then continues
When af_packet support is enabled, the autoconf process throws the following mysterious error (lines added for more c... Michal Purzynski

Also available in: Atom