Open Information Security Foundation

04/23/2024

03:38 PM Suricata Bug #6963: rule-reload: potential memory leak in multiple rule reloads

Further investigation with different runs of Suricata with the default `glibc`, `jemalloc` and `tcmalloc` showed no d... Andreas Herz

04/17/2024

01:26 PM Suricata Bug #6963: rule-reload: potential memory leak in multiple rule reloads

Some more additions, the first bump in memory usage happens with the call of "SigLoadSignatures" from 3271/883 to 388... Andreas Herz

09:14 AM Suricata Bug #6963 (New): rule-reload: potential memory leak in multiple rule reloads

There is a potential memory leak present in Suricata 6.0.18 and 7.0.4 that is revealed by the memory usage on rule-re... Andreas Herz

01/12/2024

08:08 PM Suricata Bug #6678: datasets: discard datasets that hit the memcap while loading correctly

https://github.com/OISF/suricata/pull/10155 Andreas Herz

11:20 AM Suricata Bug #6678 (Closed): datasets: discard datasets that hit the memcap while loading correctly

Loading a dataset via a signature with memcap should be discarded properly instead of a partial load.... Andreas Herz

12/22/2023

09:55 AM Suricata Feature #6649 (New): Add a keyword to match on raw data within headers especially for protocols without a dedicated parser

It would be helpful to have an additional keyword like the `content` one that would also match on headers of protocol... Andreas Herz

12/13/2023

10:10 AM Suricata Feature #6296: smtp: BDAT chunking support incl MIME parsing

Ralf Meister wrote in #note-5:
> I would like to share these patches with you. How can this be done?
We have put ... Andreas Herz

10/02/2023

03:47 PM Suricata Bug #6376 (Closed): Huge increase on Suricata load time with a lot of ip-only rules and bigger HOME_NET

At deployments with bigger HOME_NET variables, like a university or big enterprise, we could end up with a very long ... Andreas Herz

09/04/2023

12:47 PM Suricata Feature #6295 (Assigned): output: add stream-size to flow output

Since we have the `stream-size` keyword it would be helpful to have this data also into the JSON output, especially i... Andreas Herz

07/18/2023

07:22 AM Suricata Optimization #6221 (New): build: check for compiler warnings/messages

Compiling Suricata 7.0.0 on Arch Linux shows the following messages when Suricata is built:... Andreas Herz