Open Information Security Foundation

01/17/2024

01:45 AM Suricata Feature #4951: decode: datalink type 276 not yet supported

We recently had a user bump into this problem as well so I happened to find this issue. Per the request in the most r... Phil Rzewski

07/06/2021

06:29 PM Suricata Bug #3040: pcap: with -r <single file> pcap_open_offline failure does not lead to non-zero exit code

I bumped into a similar issue on Suricata v6.0.3 on macOS, and I have a pcap I can share that reproduces it, so I fig... Phil Rzewski

04/02/2021

04:40 PM Suricata Bug #4106: Duplicate TLS subjects in tls metadata.

I bumped into this problem as well. I've been able to reproduce the problem with my favorite public data source, http... Phil Rzewski

12/04/2020

05:36 PM Suricata Bug #4183: Timestamps sometimes off by 2 hours on Windows

A colleague of mine in Switzerland confirmed that he's seeing problems similar to what you describe. Very odd! Well, ... Phil Rzewski

05:28 PM Suricata Bug #4183: Timestamps sometimes off by 2 hours on Windows

I'm not sure what to tell you. I've downloaded it multiple times over the past two years from my Mac laptop, Linux VM... Phil Rzewski

12/02/2020

03:50 PM Suricata Bug #4183: Timestamps sometimes off by 2 hours on Windows

Hi Peter. A sample public pcap that reproduces the issue for me is referenced in the opening remarks (https://archive... Phil Rzewski

11/28/2020

10:10 PM Suricata Bug #4183: Timestamps sometimes off by 2 hours on Windows

Correction: I was incorrect when I said I couldn't trigger the problem on timezones that were UTC+xx:xx. When I was r... Phil Rzewski

11/26/2020

06:05 PM Suricata Bug #4183 (New): Timestamps sometimes off by 2 hours on Windows

On a scratch Windows 2016 VM in Google Cloud, I installed https://nmap.org/npcap/dist/npcap-1.00.exe and then https:/... Phil Rzewski