Open Information Security Foundation

06/08/2023

03:51 PM Suricata-Update Feature #6131 (New): threshold.conf: reconcile current threshold.conf with current state of rules

Sometimes, Suricata will issue warnings for sids that used to exist, before.
8/6/2023 -- 08:23:27 - <Warning> - [E... Juliana Fajardini Reichow

06/07/2023

01:36 AM Suricata Documentation #6124 (Assigned): userguide: add instructions/explanation for (not) running suricata with root

We can use the Suricata-update documentation as example for this:
https://suricata-update.readthedocs.io/en/latest/q... Juliana Fajardini Reichow

06/05/2023

05:37 PM Suricata Bug #6109: exception/policy: reject changes flow action in IDS mode

PR for consideration: https://github.com/OISF/suricata/pull/8970 Juliana Fajardini Reichow

03:25 PM Suricata Bug #6109: exception/policy: reject changes flow action in IDS mode

SV test for it: https://github.com/OISF/suricata-verify/pull/1229 Juliana Fajardini Reichow

06/02/2023

07:27 PM Suricata Bug #5825 (In Review): stream.midstream: if enabled breaks exception policy

PR for review: https://github.com/OISF/suricata/pull/8952 Juliana Fajardini Reichow

07:24 PM Suricata Feature #6112 (New): suricata-verify: add a "fail: true" check for tests expected to fail

Provide the ability to indicate that a test/check is expected to fail.
This would allow us to provide a good error... Juliana Fajardini Reichow

11:57 AM Suricata Bug #5486: Ethernet metadata is missing for some protocols or parts of a protocol

Sascha Steinbiss wrote in #note-11:
> Unlikely, sorry. I'd rather focus on #5912 as I don't have to dive into unknow... Juliana Fajardini Reichow

06/01/2023

08:51 PM Suricata Optimization #6111 (New): defrag: avoid passing null pointers to functions

DecodeThreadVars, ThreadVars, and possibly some other variables are sometimes passed as null parameters
in our unit ... Juliana Fajardini Reichow

02:22 PM Suricata Bug #6109 (New): exception/policy: reject changes flow action in IDS mode

We currently have the same behavior in case of 'EXCEPTION_POLICY_REJECT' regardless of being in
IDS or IPS mode.
T... Juliana Fajardini Reichow

01:07 PM Suricata Bug #5486: Ethernet metadata is missing for some protocols or parts of a protocol

Sascha Steinbiss wrote in #note-11:
> Unlikely, sorry. I'd rather focus on #5912 as I don't have to dive into unknow... Juliana Fajardini Reichow