Open Information Security Foundation

06/17/2013

07:19 AM Suricata Bug #825: http keywords not matching

Hi,
Here is a capture file:
http://mik.bme.hu/~lmadarassy/suricata/http.cap
I want to match packets sent to/fr... Laszlo Madarassy

06:52 AM Suricata Bug #825 (Closed): http keywords not matching

Hi,
I want to alert detect and alert torrent tracker messages with suricata, but it seems they won't match. Torren... Laszlo Madarassy

06:09 AM Suricata Bug #823: Sending packet failed on socket 5: Message too long

Eric Leblond wrote:
Laszlo can you confirm we have MTU set to 1500 and that all GRO, GSO are disabled on the capture... Laszlo Madarassy

03:23 AM Suricata Bug #823: Sending packet failed on socket 5: Message too long

Eric Leblond wrote:
> I've tried to reproduce the issue without success. Can you apply the attached patch to your su... Laszlo Madarassy

06/14/2013

04:07 AM Suricata Bug #823: Sending packet failed on socket 5: Message too long

Eric Leblond wrote:
> Hello this is a duplicate of #812.
>
> Please try with defrag set to no and disable GRO and... Laszlo Madarassy

06/12/2013

09:11 AM Suricata Bug #823 (Closed): Sending packet failed on socket 5: Message too long

Hi,
A new bug (or problem) again:
These errors are displayed on suricata console when traffic goes to the monitor... Laszlo Madarassy

09:05 AM Suricata Bug #819: af-packet ips mode rule processing bug

Thanks! Testing it now.
Eric Leblond wrote:
> Fix for master-1.4: https://github.com/inliniac/suricata/pull/386
Laszlo Madarassy

06/06/2013

07:04 AM Suricata Bug #819: af-packet ips mode rule processing bug

I have started tshark on eth1 and eth2 too, here is the tshark outputs, I can give you detailed captures if you need it. Laszlo Madarassy

06/04/2013

09:50 AM Suricata Bug #819: af-packet ips mode rule processing bug

I wrote a simple rule to drop tcp, udp and icmp traffic, but some HTTP traffic go through.
The traffic is going from... Laszlo Madarassy

06/03/2013

09:09 AM Suricata Bug #819 (Closed): af-packet ips mode rule processing bug

Hi,
I'm using suricata in IPS mode between eth1 and eth2, I write a test rule to drop all udp, tcp and icmp traffi... Laszlo Madarassy