Open Information Security Foundation

12/10/2013

06:59 AM Suricata Bug #1064 (Closed): Lack of Thread Deinitialization For Decoder Modules

I checked Suricata code and I found out that decoder thread modules don't set ThreadDeinit member of their TmModule i... Amin Latifi

12/09/2013

11:22 PM Suricata Bug #1061: Multiple flowbit set in one rule

The problem is in SCSigGetFlowbitsType function, we expect just zero or one instance of flowbits:set:....; keyword. I... Amin Latifi

01:13 PM Suricata Bug #1061: Multiple flowbit set in one rule

I mean suricata accepts second syntax without any error! Amin Latifi

12/08/2013

06:02 AM Suricata Bug #1061 (Closed): Multiple flowbit set in one rule

If we want to set multiple flowbits in one rule, snort has suggested used the below syntax:... Amin Latifi

12/01/2013

01:38 AM Suricata Bug #892: detect-engine.profile - custom - does not err out in incorrect toclient/srv values - suricata.yaml

Unfortunately, the problem is more basic. I found that suricata doesn't recognize "toclient-src-groups", "toclient-ds... Amin Latifi

11/23/2013

05:19 AM Suricata Bug #1043: Different results for the same input pcap file in autofp mode

For example line 2085 of 1.log does not exist in 2.log file.There are too many difference between this two file. I us... Amin Latifi

12:48 AM Suricata Bug #1043 (Closed): Different results for the same input pcap file in autofp mode

I run suricata-1.4.6 with the same pcap file for two times and the outputs are not equal. Actually, I compare fast.lo... Amin Latifi