General

Profile

Thomas Winter

  • Login: thomaswinter1
  • Registered on: 04/25/2023
  • Last sign in: 12/14/2025

Issues

open closed Total
Assigned issues 1 3 4
Reported issues 2 4 6

Projects

Project Roles Registered on
Suricata Developer 08/08/2023
Suricata-Update Developer 08/08/2023

Activity

12/16/2025

02:16 AM Suricata Bug #8165: FTP data is not blocked with drop rule and filemd5 match
A potential problem is FTPDataStateGetTxFiles and FTPDataGetAlstateProgress do... Thomas Winter

12/14/2025

07:41 PM Suricata Bug #8165: FTP data is not blocked with drop rule and filemd5 match
Forgot to say, the same file over http and smtp is properly blocked where the data packet is dropped. Thomas Winter

12/12/2025

04:20 AM Suricata Bug #8165 (New): FTP data is not blocked with drop rule and filemd5 match
Running suricata in IPS mode with a ftp-data drop rule to match on MD5. The event is alerted and with a drop rule, lo... Thomas Winter

07/21/2025

11:08 PM Suricata Bug #7651: decoder/pppoe: valid packets are getting dropped as decoder.ppp.unsup_proto
Hi, I have made suricata-verify PR that contains a pcap I captured myself https://github.com/OISF/suricata-verify/pul... Thomas Winter

04/13/2025

11:54 PM Suricata Bug #7651: decoder/pppoe: valid packets are getting dropped as decoder.ppp.unsup_proto
Locally I have made DecodePPPUncompressedProto and DecodePPPOESession just return TM_ECODE_OK for the following proto... Thomas Winter

04/09/2025

03:05 AM Suricata Bug #7651 (Closed): decoder/pppoe: valid packets are getting dropped as decoder.ppp.unsup_proto
After upgrading from suricata 7.0.6 to 7.0.8, we found that PPP packets were getting dropped.
The packets were getti...
Thomas Winter

12/21/2023

11:35 PM Suricata Documentation #6552: doc: add tcp timeout fix to upgrade guide
Should use "emergency-closed" not "emergency_closed" otherwise you get a deprecated warning log. Thomas Winter

12/06/2023

08:30 PM Suricata Documentation #6552: doc: add tcp timeout fix to upgrade guide
Feel free to close this now. Thomas Winter

11/27/2023

04:07 AM Suricata Documentation #6552: doc: add tcp timeout fix to upgrade guide
The cause was this patch c50ef8cc21 ("flow: fix TCP closed default initialization") which increased the timeout for T... Thomas Winter

11/24/2023

04:36 AM Suricata Documentation #6552: doc: add tcp timeout fix to upgrade guide
The streamingBuffer rework seems to be a red herring. I think it just increased memuse just enough to hit the memcap.... Thomas Winter

Also available in: Atom