Open Information Security Foundation

07/09/2025

07:20 PM Suricata Documentation #6096: eve/app-layer: generate example eve-log for each protocol

What we agreed with Jason as a first step is to add example logs, then provide corresponding public pcaps and as a th... Peter Manev

06/18/2025

07:13 AM Suricata Documentation #6450: userguide: add section about sshhash

Think its all good from my view Peter Manev

03/30/2025

11:30 AM Suricata Feature #845 (Closed): stats: track memory consumption

Peter Manev

11:29 AM Suricata Feature #845: stats: track memory consumption

@Jlucovsky - all good, yes thank you! Peter Manev

03/05/2025

04:10 PM Suricata Task #6952 (In Progress): ppa: run as a non-root user

Peter Manev

03:43 PM Suricata Task #6952: ppa: run as a non-root user

For Suricata 8 implement:
* run as user
* systemd
note: make sure ownership is covered too.
Peter Manev

11/25/2024

01:27 PM Suricata Bug #7410: Engine does not warn when a rule contains multiple threshold keywords

However, if multiple thresholds are listed, latest stable complains about it :... Peter Manev

08:32 AM Suricata Bug #7410: Engine does not warn when a rule contains multiple threshold keywords

I think I needed more coffee :) before my previous post. Peter Manev

07:43 AM Suricata Bug #7410: Engine does not warn when a rule contains multiple threshold keywords

Latest stable complains and it will not load the rule in a regular run, however the message is not quite clear:
... Peter Manev

09/09/2024

04:33 PM Suricata Bug #7250 (New): tls version match can have incorrect behaviour

We have detailed TLS (event_type:tls) and flow (event_type:flow) logs where information about an encrypted session ... Peter Manev