Open Information Security Foundation

10/18/2015

04:46 PM Suricata Support #1580 (Closed): HTTP not processed when used on Debian 8 Stable Jessie

After I moved migrated a server from Ubuntu LTS to Debain 8 Stable Jessie, I noticed that HTTP traffic was not being ... Sean Whalen

09/22/2015

08:23 AM Suricata Bug #1554: stored: false in files log when files were actually stored

Will the fix be applied to 2.0.x? Sean Whalen

09/21/2015

01:10 PM Suricata Bug #1554: stored: false in files log when files were actually stored

Yes. The stored files are intact, with matching hashes, I've sent a couple example pcaps to your gmail account. Sean Whalen

09/20/2015

12:37 PM Suricata Bug #1554: stored: false in files log when files were actually stored

The rule I'm using
alert http any any -> any any (msg:"FILE store all"; filestore; noalert; sid:15; rev:1;) Sean Whalen

11:45 AM Suricata Bug #1554: stored: false in files log when files were actually stored

Typo:
I've observed this with Suricata versions 2.0.8-1ubuntu2 and 2.1~beta4-0ubuntu12 from the PPAs. Sean Whalen

11:41 AM Suricata Bug #1554 (Closed): stored: false in files log when files were actually stored

In my files log, stored is always false, even when files are actually stored.
For example:
$ cat pcap/files-jso... Sean Whalen