Open Information Security Foundation

03/24/2023

03:44 PM Suricata Bug #5938 (New): for syslog output, the setting identity is not properly set

Lets say for outputs, you have something akin the the following.... Zane B-H

02/22/2023

03:07 PM Suricata Bug #5868: filestore: not saving files when filestore enabled by rule matching on file_data (instead saves 0 bytes)

Just realized I forgot to include the rule in question...... Zane B-H

02/16/2023

09:13 PM Suricata Bug #5868 (Closed): filestore: not saving files when filestore enabled by rule matching on file_data (instead saves 0 bytes)

So I noticed that Suricata was occasionally creating zero sized files in the file store, despite the related JSON say... Zane B-H

07/11/2022

05:45 PM Suricata Feature #5440 (New): multiple stats EVE logs with different intervals

While you can make stats output to multiple EVE logs, the problem is .stats.interval can't be specified on a per outp... Zane B-H

04/20/2022

01:54 PM Suricata Bug #5276: eve: payload field randomly missing even if the packet field is present

Derp. Just realized I put payload twice in the title. It is payload will be missing at times even if the packet field... Zane B-H

04/19/2022

03:03 PM Suricata Bug #5276 (Closed): eve: payload field randomly missing even if the packet field is present

Originally came across this in 6.0.2, but 6.0.4 and tuning made this less present. Far less present in 6.0.5-dev, but... Zane B-H

02/01/2022

10:15 PM Suricata Support #5033: "Failed to attach filter: Cannot allocate memory" being thrown on some systems but not others that are seemingly identical.

Peter Manev wrote in #note-1:
> Are both systems the same ? (kernel/OS etc ?)
More testing and nearly certain it ... Zane B-H

09:57 PM Suricata Support #5033: "Failed to attach filter: Cannot allocate memory" being thrown on some systems but not others that are seemingly identical.

Peter Manev wrote in #note-1:
> Are both systems the same ? (kernel/OS etc ?)
So been poking at this a bit more... Zane B-H

06:01 PM Suricata Support #5033 (Closed): "Failed to attach filter: Cannot allocate memory" being thrown on some systems but not others that are seemingly identical.

Running 6.0.2 and am running into this issue on a few systems. They are seemingly identical, but for some reason the ... Zane B-H