Open Information Security Foundation

10/07/2021

07:48 PM Suricata Bug #4740: libnet error with reject action on pfSense

Some further research on the pfSense end uncovered what looks like the solution. In my virtual machine testing, I cou... Bill Meeks

10/06/2021

06:24 PM Suricata Bug #4740: libnet error with reject action on pfSense

I am the package maintainer for Suricata on pfSense. I can reproduce this error on a pfSense virtual machine running ... Bill Meeks

08/25/2021

01:58 PM Suricata Bug #4648 (Closed): HTTP2 built-in rules are not included in the source tarball for Suricata 6.0.3

The source code tarball for Suricata 6.0.3 does not contain the _http2-events.rules_ file in the _../rules/_ sub-dire... Bill Meeks

08/19/2021

02:51 PM Suricata Bug #4478: Netmap IPS mode in Suricata 6.x ceases to pass traffic after a short, variable period of time on FreeBSD-12

Time for an update on this issue. Been working offline for a while with some of the Suricata team on debugging this p... Bill Meeks

07/19/2021

01:39 PM Suricata Bug #4478: Netmap IPS mode in Suricata 6.x ceases to pass traffic after a short, variable period of time on FreeBSD-12

Martin Rehak wrote in #note-15:
> Seeing that the changes you have prepared relates to netmap (as far as I understand... Bill Meeks

07/18/2021

04:25 PM Suricata Bug #4478: Netmap IPS mode in Suricata 6.x ceases to pass traffic after a short, variable period of time on FreeBSD-12

Jeff Lucovsky wrote in #note-13:
> Sounds like a good direction however I wonder why it's occurring with more prevale... Bill Meeks

07/17/2021

11:37 PM Suricata Bug #4478: Netmap IPS mode in Suricata 6.x ceases to pass traffic after a short, variable period of time on FreeBSD-12

I may have found a contributor to this issue. I am testing now to verify my hunch.
When the code in @source-netmap.c... Bill Meeks

07/09/2021

01:31 PM Suricata Bug #4478: Netmap IPS mode in Suricata 6.x ceases to pass traffic after a short, variable period of time on FreeBSD-12

Jeff Lucovsky wrote in #note-8:
> Could you share your @netmap@ configuration sections from @suricata.yaml@?
Not ... Bill Meeks

06/24/2021

11:05 PM Suricata Bug #4478: Netmap IPS mode in Suricata 6.x ceases to pass traffic after a short, variable period of time on FreeBSD-12

Just to eliminate the possibility of pfSense being part of the issue, I installed Suricata from Ports on a fresh Free... Bill Meeks

06/22/2021

10:48 PM Suricata Bug #4478: Netmap IPS mode in Suricata 6.x ceases to pass traffic after a short, variable period of time on FreeBSD-12

I have some additional information to report. Don't know how useful it might be, though.
After some period of time (... Bill Meeks