Open Information Security Foundation

07/19/2021

01:39 PM Suricata Bug #4478: Netmap IPS mode in Suricata 6.x ceases to pass traffic after a short, variable period of time on FreeBSD-12

Martin Rehak wrote in #note-15:
> Seeing that the changes you have prepared relates to netmap (as far as I understand... Bill Meeks

07/18/2021

04:25 PM Suricata Bug #4478: Netmap IPS mode in Suricata 6.x ceases to pass traffic after a short, variable period of time on FreeBSD-12

Jeff Lucovsky wrote in #note-13:
> Sounds like a good direction however I wonder why it's occurring with more prevale... Bill Meeks

07/17/2021

11:37 PM Suricata Bug #4478: Netmap IPS mode in Suricata 6.x ceases to pass traffic after a short, variable period of time on FreeBSD-12

I may have found a contributor to this issue. I am testing now to verify my hunch.
When the code in @source-netmap.c... Bill Meeks

07/09/2021

01:31 PM Suricata Bug #4478: Netmap IPS mode in Suricata 6.x ceases to pass traffic after a short, variable period of time on FreeBSD-12

Jeff Lucovsky wrote in #note-8:
> Could you share your @netmap@ configuration sections from @suricata.yaml@?
Not ... Bill Meeks

06/24/2021

11:05 PM Suricata Bug #4478: Netmap IPS mode in Suricata 6.x ceases to pass traffic after a short, variable period of time on FreeBSD-12

Just to eliminate the possibility of pfSense being part of the issue, I installed Suricata from Ports on a fresh Free... Bill Meeks

06/22/2021

10:48 PM Suricata Bug #4478: Netmap IPS mode in Suricata 6.x ceases to pass traffic after a short, variable period of time on FreeBSD-12

I have some additional information to report. Don't know how useful it might be, though.
After some period of time (... Bill Meeks

05/06/2021

02:41 PM Suricata Bug #4478 (Assigned): Netmap IPS mode in Suricata 6.x ceases to pass traffic after a short, variable period of time on FreeBSD-12

Some change between Suricata 5.x and Suricata 6.x in the netmap operation code seems to have introduced an unintended... Bill Meeks

01/14/2019

11:04 PM Suricata Bug #2765 (Resolved): GeoIP keyword depends on now discontinued legacy GeoIP database

Patch is ready for final review and merge here: https://github.com/OISF/suricata/pull/3622 Bill Meeks

01/06/2019

07:18 PM Suricata Bug #2765: GeoIP keyword depends on now discontinued legacy GeoIP database

Yes, I will submit it as a pull request. My Suricata repo clone is quite ancient, though. So give me a day or two t... Bill Meeks

01/03/2019

10:24 PM Suricata Bug #2765 (Closed): GeoIP keyword depends on now discontinued legacy GeoIP database

The "geoip" keyword functionality depends on the now discontinued GeoIP Legacy Free Database format. Maxmind, the cr... Bill Meeks