Open Information Security Foundation

10/10/2026

SB 09:31 AM Suricata Bug #9184 (Assigned): dcerpc: TCP gap returns a parser error and disables app-layer inspection for the rest of the flow

Shivani Bhardwaj

10/09/2026

SB 05:00 AM Suricata Bug #9170 (In Review): detect/iponly: threshold by_flow with a high count never alerts

In Review PR: https://github.com/OISF/suricata/pull/16415 Shivani Bhardwaj

SB 04:58 AM Suricata Bug #9166: detect/iponly: dotted netmask addresses match 0.0.0.0/N instead of network

In Review PR: https://github.com/OISF/suricata/pull/16414 Shivani Bhardwaj

SB 04:57 AM Suricata Bug #9166 (In Review): detect/iponly: dotted netmask addresses match 0.0.0.0/N instead of network

Shivani Bhardwaj

10/06/2026

SB 07:06 AM Suricata Optimization #5755: datasets: ipv4.src/dst, ip.src/dst check rules should be ip-only

I thought about this too and landed on this ticket!
> Complication is that the sets may change during the lifetime of a flow.
Correct. How about we restrict the ip-only selection to static datasets i.e. those that are just used wit... Shivani Bhardwaj

SB 06:29 AM Suricata Bug #9166 (Assigned): detect/iponly: dotted netmask addresses match 0.0.0.0/N instead of network

Shivani Bhardwaj

SB 06:26 AM Suricata Bug #9170 (In Review): detect/iponly: threshold by_flow with a high count never alerts

Since IP Only rules are evaluated once per flow, if a rule contains threshold keyword tracked by flow, then, a high count never gets matched. One count anyway does not need threshold keyword anyway. Shivani Bhardwaj

SB 06:05 AM Suricata Bug #9006 (Closed): datasets: type ip rejects standard IPv4 addresses

Shivani Bhardwaj

SB 06:05 AM Suricata Bug #9108 (Closed): datasets: type ip rejects standard IPv4 addresses (8.0.x backport)

Closed by: https://github.com/OISF/suricata/pull/16365 Shivani Bhardwaj

10/03/2026

SB 07:26 AM Suricata Bug #9108 (In Review): datasets: type ip rejects standard IPv4 addresses (8.0.x backport)

Shivani Bhardwaj