Open Information Security Foundation

Today

12:34 AM Suricata Bug #7179 (New): Capture Kernel Drops happen when data transferring inside the intranet

Mode : IDS with af-packet
Suricata : 7.0.6 and below with hyperscan
OS : Debian 12.x
Capture Kernel Drops only h... Samiux A

05/18/2024

10:53 AM Suricata Bug #7003: Suspected memory leak after Suricata binary is updated or upgraded

Please close this thread as I misconfigured the Suricata. There is no such problem. Thanks a lot. Samiux A

05/02/2024

09:30 AM Suricata Bug #7003 (Rejected): Suspected memory leak after Suricata binary is updated or upgraded

When Suricata binary is updated or upgraded, the memory consumption is more than a double, e.g. memory used 1.8gb (be... Samiux A

02/10/2024

06:23 AM Suricata Bug #6760: Hugepages Error for ARM64 and af-packet IPS mode

It seems that after the device is rebooted, the warning message gone. Samiux A

02/08/2024

06:30 PM Suricata Bug #6760: Hugepages Error for ARM64 and af-packet IPS mode

The directory of /sys/devices/system/ is :
clockevents clocksource container cpu
The directory of /sys/devic... Samiux A

06:17 PM Suricata Bug #6760 (Closed): Hugepages Error for ARM64 and af-packet IPS mode

Suricata 7.0.3
Debian 12.x
CPU : ARM64 - 8 cores
af-packet IPS mode
I got the following error message :
[220... Samiux A

11/08/2023

03:28 PM Suricata-Update Bug #6449 (Rejected): Updating StamusOpenNRD error

I just registered to Stamus OpenNRD feed and follow the following steps to install and update. However, it produces ... Samiux A

07/27/2023

08:41 AM Suricata Support #6223: HTTP/HTTP2 websites cannot be accessed; however HTTP3 can

The problem solved by setting "exception-policy: ignore" to "exception-policy: bypass". Thank you. Samiux A

07/23/2023

01:20 AM Suricata Support #6223: HTTP/HTTP2 websites cannot be accessed; however HTTP3 can

However, I find at least the following websites cannot be accessed. I do not know the reason. Any idea?
https://... Samiux A

07/22/2023

08:57 AM Suricata Support #6223: HTTP/HTTP2 websites cannot be accessed; however HTTP3 can

The problem solved after changing the "exception-policy: auto" to "exception-policy: ignore" in suricata.yaml. Thank... Samiux A