Open Information Security Foundation

09/05/2024

08:12 AM Suricata Optimization #5699 (In Review): dcerpc: switch to incomplete api for tcp

Shivani Bhardwaj

05:37 AM Suricata Bug #7238: applayer: protocol flows are miscounted in case of error

Philippe Antoine wrote in #note-1:
> Could you expand a bit more ?
>
> First question : is this about UDP or TCP ... Shivani Bhardwaj

09/04/2024

10:10 AM Suricata Optimization #7208: Tcpreassmble GetBlock needs optimization

> So I read the SBBUpdate function code, found that new StreamingBufferBlock node will be adjusted by ConsolidateFwd ... Shivani Bhardwaj

09/03/2024

11:22 AM Suricata Bug #7238 (Assigned): applayer: protocol flows are miscounted in case of error

The flow counter is not incremented if an applayer parser encountered an error. This needs to be fixed. Shivani Bhardwaj

08/29/2024

12:50 PM Suricata Feature #4904 (In Review): dcerpc: frames support

In Review initial PR: https://github.com/OISF/suricata/pull/11678 Shivani Bhardwaj

10:23 AM Suricata Feature #4904 (In Progress): dcerpc: frames support

Shivani Bhardwaj

08:29 AM Suricata Task #7219 (In Review): rust/crates: update base64

In Review PR: https://github.com/OISF/suricata/pull/11677 Shivani Bhardwaj

05:56 AM Suricata Bug #7230 (In Review): dcerpc: invalid dcerpc header is not rejected

In Review PR: https://github.com/OISF/suricata/pull/11676 Shivani Bhardwaj

05:33 AM Suricata Bug #7230 (In Review): dcerpc: invalid dcerpc header is not rejected

This leads to invalid dcerpc traffic being accepted by the parser and buffered and parsed like the regular dcerpc tra... Shivani Bhardwaj

08/26/2024

05:19 AM Suricata Feature #6164: rules: allow matching on flow pkts and bytes

Philippe Antoine wrote in #note-9:
> This is not a subtask of elephant flow detection in #5645
> This exists also ... Shivani Bhardwaj