Open Information Security Foundation

09/26/2012

04:13 PM Suricata Feature #423: pkt_data keyword

Hey Victor, why do you think the engine is not loading the rule in to sig_lists? Do I need to do something else after... Xavier Lange

09/12/2012

03:08 AM Suricata Feature #423: pkt_data keyword

Getting closer. I have a pkt-data.c in place and compiling but I need to get a handle on the sig (out of the engine) ... Xavier Lange

09/04/2012

01:25 PM Suricata Feature #423: pkt_data keyword

This is a feature request for something done in Snort and it essentially forces pattern match from the beginning of a... Xavier Lange

05/01/2012

01:16 PM Suricata Bug #428: Segfault when processing NSA pcap with http-events.rules

Victor: sorry I missed this. I finally figured out what kind of instructions those were (AVX) and also found out how ... Xavier Lange

04/04/2012

03:42 PM Suricata Bug #428: Segfault when processing NSA pcap with http-events.rules

I just realized that the built in GCC on Mac OS X 10.6 (Lion) is not actually GCC. Apple supports all the GCC compile... Xavier Lange

03/23/2012

03:36 AM Suricata Bug #271: Need for proper option for testing a setup

Victor, your last observation was correct. The local variable conf_test had to be added to the list of special cases ... Xavier Lange

03/21/2012

03:35 AM Suricata Bug #428: Segfault when processing NSA pcap with http-events.rules

Hi Peter,
I am using the dataset linked to in https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Pub... Xavier Lange

02:43 AM Suricata Bug #428 (Closed): Segfault when processing NSA pcap with http-events.rules

I am running a file processing run against the NSA data from 2009-04-21-04-06-191 and only "http-events.rules" loaded... Xavier Lange

03/19/2012

01:21 PM Suricata Bug #271 (Feedback): Need for proper option for testing a setup

I have a topic branch on github for this bug: https://github.com/xrl/suricata/tree/bug_271
Please review and integ... Xavier Lange