Open Information Security Foundation

11/27/2024

08:11 PM Suricata Bug #7406: eve: Alerts with app_proto=tls no longer logs the tls app data

thanks a lot for the prompt fix! https://github.com/OISF/suricata/pull/12161 LGTM. tug tugtug

08:03 PM Suricata Bug #7406: eve: Alerts with app_proto=tls no longer logs the tls app data

Yeah, I found it on github and made a comment there too. I just think the if layout can be re-organized a bit to be m... tug tugtug

05:04 PM Suricata Bug #7406: eve: Alerts with app_proto=tls no longer logs the tls app data

I have tested the patch, the patch crashes when _pflow_ is NULL. Since the condition would never get the flag set whe... tug tugtug

11/22/2024

08:13 PM Suricata Bug #7406: eve: Alerts with app_proto=tls no longer logs the tls app data

This is the simplified version of my rules:... tug tugtug

03:13 PM Suricata Bug #7406 (Closed): eve: Alerts with app_proto=tls no longer logs the tls app data

Prior to change of fixes to ticket #6846, the application data is reported in almost every alerts, now the applicatio... tug tugtug

10/27/2023

05:50 PM Suricata Bug #6423 (Closed): detect-filesize no longer supports units in value

We're upgrading our server from 6 to 7, and discovered that some rules now fail to load.
We narrowed it down to the ... tug tugtug

04/26/2023

03:58 PM Suricata Bug #6024 (Rejected): detect: reload rules now takes forever on a rather idle env after #5969

As a side effect of #5969, now the switching to the new context takes forever to complete when there isn't frequent n... tug tugtug

07/25/2022

08:07 PM Suricata Bug #5458 (Closed): Reject action is no longer working

This is a pretty significant regression that got slipped away during any testing (if any) before the release.
As o... tug tugtug

08:02 PM Suricata Bug #5457 (Closed): Counters are not initialized in all places.

counter_alerts_overflow and counter_alerts_suppressed are only initialized in DetectEngineThreadCtxInit in detect-eng... tug tugtug

12/16/2021

04:50 PM Suricata Bug #4914 (New): FLOW_DIR_REVERSED is not handled in multiple places

FLOW_DIR_REVERSED may be set if a midstream flow is picked up.
However at least in the following cases, the flag is ... tug tugtug