Open Information Security Foundation

06/13/2019

03:53 PM Suricata Feature #2147: fileinfo: sha1 hash not logged if state == TRUNCATED

If you're asking me I have to say that the aforementioned PR was closed by Victor Julien with no clear reason (at lea... Fanny Dwargee

02/28/2019

01:11 PM Suricata Bug #2358: Inconsistent DNS/flows extracted from pcap

Hi again,
Do you have any info related to in which release or version could this issue be fixed or perhaps it's not ... Fanny Dwargee

09/11/2018

07:08 AM Suricata Bug #2358: Inconsistent DNS/flows extracted from pcap

Peter, do you need anything else from me? Fanny Dwargee

08/23/2018

11:07 AM Suricata Bug #2358: Inconsistent DNS/flows extracted from pcap

Ok, here it goes...
Retested with Suricata v4.1.0rc1 and the bug still persists:... Fanny Dwargee

10:20 AM Suricata Bug #2358: Inconsistent DNS/flows extracted from pcap

Peter Manev wrote:
> Would it be the same case if you read the pcap "-r -k none" several times?
Sorry for the ver... Fanny Dwargee

02/28/2018

10:17 AM Suricata Bug #2358: Inconsistent DNS/flows extracted from pcap

I'm guessing that's confirming the bug... right? Fanny Dwargee

12/13/2017

10:36 AM Suricata Bug #2358 (New): Inconsistent DNS/flows extracted from pcap

*+ISSUE DESCRIPTION+*
Analyzing through a UNIX socket file the same pcap several times in the same Suricata run do... Fanny Dwargee

09/21/2017

04:32 AM Suricata Bug #2215: Lost events writing to unix socket

My apologies,
I think my initial explantion lacks how I'm using Suricata, I'm controlling Suricata from a unix soc... Fanny Dwargee

01:28 AM Suricata Bug #2215: Lost events writing to unix socket

...so that would be a mix between your idea and the initial one (I'm sorry but I don't know how to edit a post) Fanny Dwargee

01:27 AM Suricata Bug #2215: Lost events writing to unix socket

I get your point and it's a really good one but I'm not totally convinced. :)
Why not let the user choose if waiti... Fanny Dwargee