Open Information Security Foundation

04/19/2017

10:34 AM Suricata Bug #2097 (Closed): "Name of device should not be null" appears in suricata.log when using pfring with configuration from suricata.yaml

https://github.com/inliniac/suricata/commit/bb2d8a713382984b90b20d425230f32ce4106b3e introduced the `dev` variable an... Ray Ruvinskiy

11/30/2016

11:47 AM Suricata Feature #1969 (Closed): TLS transactions with session resumption are not logged

Resumed TLS sessions weren't being logged. https://github.com/inliniac/suricata/pull/2423 adds logging in this case. Ray Ruvinskiy

01/07/2016

08:37 PM Suricata Bug #1665 (Closed): Default maximum packet size is insufficient when VLAN tags are present (and not stripped)

The default packet size in most cases ends up being 1516 bytes. This is because GetIfaceMaxHWHeaderLength in util-ioc... Ray Ruvinskiy

08:25 PM Suricata Bug #1664 (Closed): Unreplied DNS queries not logged when flow is aged out

If a DNS query is not followed by a response before the flow is timed out, the DNS transaction is not logged at all. ... Ray Ruvinskiy

09/22/2015

08:56 PM Suricata Bug #1560 (Closed): Newline in certificate subject name results in premature line break in TLS log

An example is the site https://25livepub.collegenet.com/CollegeNET/, whose certificate has a newline embedded in the ... Ray Ruvinskiy

03:49 PM Suricata Bug #1559 (Closed): Invalid HTTP status in HTTP log

I'm not sure whether this is a bug or intentional, but I wanted to bring it up.
A server may return an invalid HTT... Ray Ruvinskiy

03/30/2015

08:12 PM Suricata Support #1433: Transaction can be logged before stream reassembly and parsing are complete

Confirmed fixed with 2.1beta3. Thanks! Ray Ruvinskiy

08:12 PM Suricata Support #1433: Transaction can be logged before stream reassembly and parsing are complete

Confirmed fixed with 2.1beta3. Ray Ruvinskiy

03/29/2015

10:15 AM Suricata Support #1433 (Closed): Transaction can be logged before stream reassembly and parsing are complete

This has been observed with suricata 2.0, specifically with HTTP transactions, although I wonder if the issue is more... Ray Ruvinskiy

03/21/2015

12:09 PM Suricata Bug #1426: Files prematurely truncated by detection engine even though force-md5 is enabled

Thanks, that did the trick!
Out of curiosity, could you please explain under what circumstances FileDisableStoring... Ray Ruvinskiy