Open Information Security Foundation

09/23/2019

01:50 PM Suricata Bug #3190: file_data inspection inhibited by additional (non-file_data) content match rule

@Victor: hope this does it: https://github.com/OISF/suricata-verify/pull/130 Gabriel Somlo

01:28 PM Suricata Bug #3190: file_data inspection inhibited by additional (non-file_data) content match rule

Turns out, my redmine account also doesn't have the power to fix the "affected version" field which should be '5.0rc'... Gabriel Somlo

01:22 PM Suricata Bug #3190 (Closed): file_data inspection inhibited by additional (non-file_data) content match rule

Following this fix: https://github.com/OISF/suricata/pull/4211/commits/d4bc46038133a26ac0010ef64c865746f95814c7,
@fi... Gabriel Somlo

01:23 PM Suricata Bug #2395: File_data inspection depth while inspecting base64 decoded data

Opened new bug #3190 to keep things simple. Gabriel Somlo

09/22/2019

01:00 PM Suricata Bug #2395: File_data inspection depth while inspecting base64 decoded data

@Victor, thanks for the fix, it does indeed change the behavior of suricata to generate the appropriate alert on that... Gabriel Somlo

08/19/2019

11:17 PM Suricata Bug #2395: File_data inspection depth while inspecting base64 decoded data

Andreas Herz wrote:
> @Gabriel what does your suricata.yaml look like?
@Andreas: I am now using fedora 30 with su... Gabriel Somlo

09/24/2018

05:04 PM Suricata Bug #2395: File_data inspection depth while inspecting base64 decoded data

I'm experiencing the same issue (failure to trigger on smtp base64 "file_data" pattern), both using the Fedora 28 bui... Gabriel Somlo