Open Information Security Foundation

03/29/2024

01:55 PM Suricata Bug #6789: Dns remarks without showing dns name

Hello,
All the small problems described here does not exist in the version 6,
not having enough information to un... JP Pozzi

03/12/2024

11:29 AM Suricata Bug #6789: Dns remarks without showing dns name

Hello,
The message :
"ET POLICY Credit Card Number Detected in Clear (16 digit spaced)" is not associated with an... JP Pozzi

03/05/2024

11:23 AM Suricata Bug #6789: Dns remarks without showing dns name

Hello,
Another message without any elements given in the alert file :
ET POLICY Credit Card Number Detected in Clea... JP Pozzi

02/27/2024

11:42 PM Suricata Bug #6789: Dns remarks without showing dns name

It is the sameproblem with the rule :
"ET DNS Excessive NXDOMAIN responses - Possible DNS Backscatter or Domain Gen... JP Pozzi

11:21 PM Suricata Bug #6789: Dns remarks without showing dns name

Hello,
It was OK in the previous versions (6). One other rule does not display usable information :
"ET POLICY Cre... JP Pozzi

02/19/2024

08:47 PM Suricata Bug #6789 (Feedback): Dns remarks without showing dns name

Hello,
While usinf Suricata 7.02 or 7.03 I found that some alerts are lacking info.
I find aone for the message :
... JP Pozzi

02/18/2024

11:12 PM Suricata Support #6780: Suricat 7.0.3 not starting

Hello,
I look in the libhtp code and I found a reference to the symbol "htp_connp_tx_freed".
The 7.0.3 version work... JP Pozzi

02/14/2024

04:36 PM Suricata Support #6780: Suricat 7.0.3 not starting

Hello,
The "good" version seems to be installed in :
/usr/src/PGM/BUILD/suricata-7.0.3/libhtp
cat VERSION
# This ... JP Pozzi

03:25 PM Suricata Support #6780 (Closed): Suricat 7.0.3 not starting

Hello,
I was using Suricata 7.0.2 and I compile today 7.0.3, that new version won't start with a message :
suricata... JP Pozzi

02/15/2016

08:28 AM Suricata Feature #1700 (Closed): enable "relro" and "now" in compile options for 3.0

Hello,
I compile the 3.0 version and wants to compile it with "-z relro -z now", but, even if some options are in ... JP Pozzi