Open Information Security Foundation

04/24/2020

01:40 AM Suricata-Update Bug #3664 (Closed): Removing filename ends with ".rules" requirement for URL feeds of rules

suricata-update will only process contents of filenames that end in ".rules". However when using things like ThreatQ'... Eoin Miller

02/19/2020

09:41 PM Suricata Bug #3480: EVE JSON - Incorrect Packet Logged

Jason Ish wrote in #note-6:
> So they payload should be the same as seen in unified2, minus the headers, as can pret... Eoin Miller

02/18/2020

11:30 PM Suricata Bug #3480: EVE JSON - Incorrect Packet Logged

Jason Ish wrote:
> The packet data found in unified2 is more like the "payload" option of eve - in unified2 the pack... Eoin Miller

05:09 PM Suricata Bug #3480: EVE JSON - Incorrect Packet Logged

Verified same behavior with release 5.0.2. Eoin Miller

03:49 AM Suricata Bug #3480: EVE JSON - Incorrect Packet Logged

Peter Manev wrote:
> I think it seems the packet logged should be packet 5 (not 7) as it is the ACK of the POST (pac... Eoin Miller

02/14/2020

08:50 PM Suricata Bug #3480 (New): EVE JSON - Incorrect Packet Logged

In reviewing the contents of the EVE JSON output, we noticed that the value for the key named "packet" was not the va... Eoin Miller