Open Information Security Foundation

11/14/2024

02:14 PM Suricata Bug #7392: Verdict output reports "drop" when rejected

This one was reported to me by an internal user but I think the motivations are both philosophical and practical.
... Jamie Lavigne

11/13/2024

01:21 PM Suricata Bug #7392 (New): Verdict output reports "drop" when rejected

When a rule with reject action matches and resets a connection, the verdict action reported is not "reject" but inste... Jamie Lavigne

08/15/2024

09:07 PM Suricata Bug #7216 (New): drop_reason counters don't support tunneled connections

Suricata 7 introduces useful new drop_reason stats counters, but the actual drop reasons aren't reflected in the coun... Jamie Lavigne

07/03/2024

10:02 PM Suricata Bug #7133 (New): Could the midstream policy support "drop-packet"?

One small challenge we have encountered during the upgrade from Suricata 6 to 7 is that the midstream policy's "drop-... Jamie Lavigne

05/28/2024

09:36 PM Suricata Feature #6063: exception-policy: stream async policy

It's important for this feature to include flow logs (or similar) visibility so that users can use the source & dest ... Jamie Lavigne

01/23/2024

01:22 AM Suricata Feature #6701 (New): Auto-bypass optimization

In a high-load IPS environment, the stream reassembly memory becomes challenging to manage because a large number of ... Jamie Lavigne

08/11/2023

06:49 PM Suricata Feature #6268 (New): Recognize related ICMP request/response pairs

Today Suricata's support for any deeper inspection of the ICMP protocol is mostly stateless matching on packet conten... Jamie Lavigne

07/13/2023

11:39 PM Suricata Feature #6215 (Assigned): Exception policy log output

A compliment to exception policy stats counters [1], we have some customers that would find it valuable to support lo... Jamie Lavigne

09:59 PM Suricata Feature #6167: Stream retransmissions stats counters

Thank you! Please feel free to close this issue as invalid then - seems that it just needs to be enabled. Jamie Lavigne

06/20/2023

08:23 PM Suricata Feature #6167 (New): Stream retransmissions stats counters

Visibility into TCP retransmissions is very useful for network operators to detect and diagnose congestion and packet... Jamie Lavigne