Open Information Security Foundation

02/27/2014

12:11 AM Suricata Optimization #1039: Packetpool should be a stack

In worker mode(or single mode), even the return-stack does not need a mutex. Actually return-stack is not necessary i... Song Liu

01/10/2014

12:59 AM Suricata Bug #1076 (Closed): Tcp assembly sliding window left_edge could be unexpected value.

Song Liu

01/05/2014

09:34 PM Suricata Bug #1076: Tcp assembly sliding window left_edge could be unexpected value.

I debugged it, and it's like SEG_GT and SEG_LEQ already convert unsigned integer to signed integer and handle this ca... Song Liu

01/04/2014

02:27 AM Suricata Bug #1076 (Closed): Tcp assembly sliding window left_edge could be unexpected value.

In stream-tcp-reassemble.c, the function StreamTcpReassembleInlineRaw() has the following code:
> /* determine the... Song Liu

01/03/2014

12:52 AM Suricata Feature #962: Can I log the mac address of the source?

In NFQ mode, we don't have MAC address, because it is layer 3. Song Liu