Open Information Security Foundation

06/12/2024

07:06 AM Suricata Bug #7091 (Feedback): Segfault on 7.0.5 with generated live traffic

Victor Julien wrote in #note-1:
> Duplicate of #6782?
Yes very likely, with the fixes from master 7.0.x there was... Andreas Herz

06/11/2024

09:22 AM Suricata Bug #7091 (Feedback): Segfault on 7.0.5 with generated live traffic

With 7.0.5 I can reproduce a segfault on Cisco T-Rex generated live traffic that occurs after a few hours of runtime.... Andreas Herz

06/10/2024

02:09 PM Suricata Optimization #7083: detect/dataset: skip adding localstatedir if fullpath is provided

https://github.com/OISF/suricata/pull/11280 (might need adjustments on the S-V test, discussion pending) Andreas Herz

09:41 AM Suricata Optimization #7083 (Assigned): detect/dataset: skip adding localstatedir if fullpath is provided

Once a full path is provided and the config option is set to `allow-absolute-filenames` is set to `true` the path sho... Andreas Herz

04/23/2024

03:38 PM Suricata Bug #6963: rule-reload: potential memory leak in multiple rule reloads

Further investigation with different runs of Suricata with the default `glibc`, `jemalloc` and `tcmalloc` showed no d... Andreas Herz

04/17/2024

01:26 PM Suricata Bug #6963: rule-reload: potential memory leak in multiple rule reloads

Some more additions, the first bump in memory usage happens with the call of "SigLoadSignatures" from 3271/883 to 388... Andreas Herz

09:14 AM Suricata Bug #6963 (New): rule-reload: potential memory leak in multiple rule reloads

There is a potential memory leak present in Suricata 6.0.18 and 7.0.4 that is revealed by the memory usage on rule-re... Andreas Herz

01/12/2024

08:08 PM Suricata Bug #6678: datasets: discard datasets that hit the memcap while loading correctly

https://github.com/OISF/suricata/pull/10155 Andreas Herz

11:20 AM Suricata Bug #6678 (Closed): datasets: discard datasets that hit the memcap while loading correctly

Loading a dataset via a signature with memcap should be discarded properly instead of a partial load.... Andreas Herz

12/22/2023

09:55 AM Suricata Feature #6649 (New): Add a keyword to match on raw data within headers especially for protocols without a dedicated parser

It would be helpful to have an additional keyword like the `content` one that would also match on headers of protocol... Andreas Herz