Open Information Security Foundation

08/13/2018

03:28 PM Suricata-Update Feature #2577 (Closed): Add Header option

hello all,
it would be helpful to add a feature with suricata-update that would allow a user to append a custom h... zach hatsis

08/09/2016

02:54 PM Suricata Support #1791: Kernel Drops: Thread occasionally Spike to 100%

Anoop Saldanha wrote:
> Hi Zach,
>
> Wanted to see if you are still seeing the issue, or did the issue solve itse... zach hatsis

10:18 AM Suricata Support #1791: Kernel Drops: Thread occasionally Spike to 100%

Hi Anoop, Just removed the taskset to see if this resolves my issue. I will report back once i know whether or not t... zach hatsis

06/06/2016

10:54 AM Suricata Support #1791: Kernel Drops: Thread occasionally Spike to 100%

Peter Manev wrote:
> Remove the taskset command - affinity is taken care of by Suricata in your suricata.yaml (where... zach hatsis

06/01/2016

05:32 PM Suricata Support #1791: Kernel Drops: Thread occasionally Spike to 100%

Peter Manev wrote:
> What is your start (command) line?

/bin/taskset -c 2,4,6,8,10,12,14,16,18-23 /bin/surica... zach hatsis

05/27/2016

10:37 AM Suricata Bug #1790: Rule Suppression not working

Another sample of a different sig that has the same issue. I am seeing this across 2404015-2404046:
@suppress gen... zach hatsis

05/26/2016

02:03 PM Suricata Support #1791: Kernel Drops: Thread occasionally Spike to 100%

Peter Manev wrote:
> For starters you can try -
>
> - max-pending-packets: 65536
> - Your cpu affinity section... zach hatsis

05/24/2016

05:19 PM Suricata Support #1791: Kernel Drops: Thread occasionally Spike to 100%

Please note i am also running PF_RING ZC as well and do not see drops on the ZC interfaces when running pfcount. zach hatsis

05:15 PM Suricata Support #1791 (Closed): Kernel Drops: Thread occasionally Spike to 100%

All,
I have noticed an issue that occasionally when traffic hits around 600-800mbps that thread utilization will ... zach hatsis

02:39 PM Suricata Bug #1790 (Closed): Rule Suppression not working

Suricata Version:
@# suricata -V
This is Suricata version 3.0.1 RELEASE
@
Rule:
@/etc/suricata/rules/malwa... zach hatsis