Open Information Security Foundation

01/23/2024

01:22 AM Suricata Feature #6701 (New): Auto-bypass optimization

In a high-load IPS environment, the stream reassembly memory becomes challenging to manage because a large number of ... Jamie Lavigne

08/11/2023

06:49 PM Suricata Feature #6268 (New): Recognize related ICMP request/response pairs

Today Suricata's support for any deeper inspection of the ICMP protocol is mostly stateless matching on packet conten... Jamie Lavigne

07/13/2023

11:39 PM Suricata Feature #6215 (Assigned): Exception policy log output

A compliment to exception policy stats counters [1], we have some customers that would find it valuable to support lo... Jamie Lavigne

09:59 PM Suricata Feature #6167: Stream retransmissions stats counters

Thank you! Please feel free to close this issue as invalid then - seems that it just needs to be enabled. Jamie Lavigne

06/20/2023

08:23 PM Suricata Feature #6167 (New): Stream retransmissions stats counters

Visibility into TCP retransmissions is very useful for network operators to detect and diagnose congestion and packet... Jamie Lavigne

06/16/2023

04:43 PM Suricata Feature #6063: exception-policy: stream async policy

I am curious about this one, could you provide some additional context on how this feature works?
I assume this is... Jamie Lavigne

05/03/2023

08:42 PM Suricata Bug #6038: TCP resets have incorrect len, nh in IPv6

I believe we also needed to fix this next protocol number in our local version as well: https://github.com/OISF/suric... Jamie Lavigne

08:20 PM Suricata Bug #6038 (Closed): TCP resets have incorrect len, nh in IPv6

Suricata's TCP rejects over IPv6 appear to have an incorrect length field value, which can cause these packets to be ... Jamie Lavigne

04/11/2023

09:35 PM Suricata Bug #5978 (Closed): stream/reassembly: memcap exception policy incorrectly applied

We are seeing two related behaviors that are occurring even when we are not exceeding the stream reassembly memcap li... Jamie Lavigne

04/07/2023

05:15 PM Suricata Feature #5974 (Assigned): Midstream exception policy "reject-both" support

When a flow is encountered midstream, Suricata can't tell which end of the connection is the client and which is the ... Jamie Lavigne