Open Information Security Foundation

12/31/2019

01:21 AM Suricata Support #3428: fail-open config no effect

The rule in iptables is : sudo iptables -A FORWARD -j NFQUEUE --queue-bypass.
So when I use the "fail-open" and set ... John Smith

12/30/2019

08:22 AM Suricata Support #3428: fail-open config no effect

libs had been installed:
libnfnetlink-dev is already the newest version (1.0.1-3).
libnfnetlink0 is already the new... John Smith

07:59 AM Suricata Support #3428: fail-open config no effect

And the Linux kernel is 4.4 John Smith

07:44 AM Suricata Support #3428 (Closed): fail-open config no effect

suricata version is 4.1.4.
run commond： suricata -c suricata.yaml -q 0
In suricata.yaml,the nfq config:
mode:accep... John Smith

09/27/2019

06:34 AM Suricata Support #3198 (Closed): max suricata pps/throughput with nfq

I want to know the max handling capacity of suricata.
Because I use the modbus slave/client to test the handling cap... John Smith

09/14/2019

07:15 AM Suricata Support #3163: The modbus engine doesn't detect the modbus response data

oh,I know why?Because these is no register to the modbus response data in detect-modbus.c John Smith

04:15 AM Suricata Support #3163 (Closed): The modbus engine doesn't detect the modbus response data

The suricata version is 4.1.4.
And I still send the modbus request data and response data.
But only see the modbus-... John Smith

09/02/2019

08:00 AM Suricata Support #3134: rule reload sometimes not working in worker runmode

ok,I will try the 4.1.4.Thank you. John Smith

07:31 AM Suricata Support #3134: rule reload sometimes not working in worker runmode

ok,there are my steps:
(1) suricata -c /etc/suricata/suricata.yaml -q 0 -q 1 -q 2
(2) kill -USR2 $(pidof suricata)
... John Smith

08/30/2019

01:41 AM Suricata Support #3134 (Closed): rule reload sometimes not working in worker runmode

When I set the runmode as workers and I use this command 'kill -USR2 $(pidof suricata)' to reload rules.But sometimes... John Smith