Open Information Security Foundation

02/18/2016

01:27 AM Suricata Support #1213: HTTP reassembly problem - Suricata 2.0.1

Hi, I didn't upgrade my suricata Mateusz Pigulski

06/01/2015

01:00 PM Suricata Support #1432: Reassembling segments with size > 1500

Peter Manev wrote:
> Hi,
>
> Can you reproduce that with a pcap - if you can, can you please consider sharing (p... Mateusz Pigulski

04/13/2015

06:20 AM Suricata Support #1432: Reassembling segments with size > 1500

Hi, I have upgraded suricata to 2.0.7 version but effect is the same.
Yes, traffic is in vlan
Flow-timeouts are lo... Mateusz Pigulski

04/02/2015

07:16 AM Suricata Support #1432: Reassembling segments with size > 1500

Peter Manev wrote:
> Do you have the same issue present as well with 2.0.7?
I don't know because I didn't try u... Mateusz Pigulski

04/01/2015

09:13 AM Suricata Support #1432: Reassembling segments with size > 1500

> Are you confident the MTU on the switch is correspondent to the MTU in the traffic?
Yes I am sure that traffic p... Mateusz Pigulski

03/31/2015

12:23 AM Suricata Support #1432: Reassembling segments with size > 1500

Peter Manev wrote:
> Can you please post the last entry run from your stats.log?
Please find it in attachment
Mateusz Pigulski

03/30/2015

08:12 AM Suricata Support #1432: Reassembling segments with size > 1500

Mateusz Pigulski wrote:
> Victor Julien wrote:
> > Have you made sure NIC offloading is disabled? See [[Self_Help_D... Mateusz Pigulski

06:48 AM Suricata Support #1432: Reassembling segments with size > 1500

Victor Julien wrote:
> Have you made sure NIC offloading is disabled? See [[Self_Help_Diagrams]]
Yes I have disab... Mateusz Pigulski

05:00 AM Suricata Support #1432: Reassembling segments with size > 1500

Victor Julien wrote:
> Can you try setting the 'default-packet-size' in your yaml to 1530 (or a bit higher if it doe... Mateusz Pigulski

03/27/2015

04:21 AM Suricata Support #1432: Reassembling segments with size > 1500

Peter Manev wrote:
> You can try increasing the MTU size on the interface you are sniffing on.
My suricata is sni... Mateusz Pigulski