Open Information Security Foundation

11/19/2014

01:39 PM Suricata Bug #1178: tcp.reassembly_memuse missprint in stats.log

I agree that it should only be reported once, not per-thread, given it is a global number.
I also see that the val... Ken Steele

01:31 PM Suricata Bug #1321: Flow memuse bookkeeping error

Fix submitted in PR 1221. Ken Steele

11:27 AM Suricata Bug #1321 (Closed): Flow memuse bookkeeping error

There appears to be a mismatch between increase flow_memuse when allocating a new flow and decrementing it when freei... Ken Steele

11:40 AM Suricata Optimization #1322 (Closed): Flow Spare Queue should be a stack

It would be better is the spare flows were stored on a stack rather than a queue. Then the memory for the flow would ... Ken Steele

11/12/2014

02:16 PM Suricata Bug #1315 (Rejected): trans_q should not have hardcoded size

The PacketQueue trans_q[256] in suricata.h is always indexed by tv->inq->id, where Tmq* inq->id is assigned in tm-que... Ken Steele

01:12 PM Suricata Bug #632: tcp.reassembly_memuse incorrectly reported

Now (suricat 2.0.x) stats.log reports the value of ra_memuse for each thread. So it is no longer summed incorrectly, ... Ken Steele

01:01 PM Suricata Bug #1178: tcp.reassembly_memuse missprint in stats.log

Looking at the Suricata source code, it appears that the memcaps are global, but reported by every thread. There is o... Ken Steele

11/11/2014

12:34 PM Suricata Optimization #1313 (New): All Free functions should correctly handle NULL pointers

All memory free functions should properly handle NULL pointers (including SCFree). Then all the NULL checks before ca... Ken Steele

09/30/2014

08:56 AM Suricata Bug #1289: MPM b2gm matcher has questionable code

My work around was to remove the b2gm and b2gc MPM. Ken Steele

09/29/2014

03:37 PM Suricata Bug #1289 (Closed): MPM b2gm matcher has questionable code

The B2GM MPM matcher has questionable code related to use of B2gmPattern1 structures. These are only used for pattern... Ken Steele