Open Information Security Foundation

08/30/2016

07:35 AM Suricata Bug #1834: Lost HTTP responses when using multiple af-packet threads

I'm now on Linux 4.7.1, and it seems that the problem is gone.
As of other suggestions, again, I don't know how to... WGH WGH

07/28/2016

10:38 AM Suricata Bug #1833: Transaction can be logged before stream reassembly and parsing are complete

I've just checked, it certainly happens as of @ec602089a@ (tagged @suricata-3.1.1@). WGH WGH

06/30/2016

08:09 AM Suricata Bug #1833: Transaction can be logged before stream reassembly and parsing are complete

FWIW, my kernel is 4.6.2, and the bug is reproducible on 3.13.0-32 as well. WGH WGH

08:06 AM Suricata Bug #1834: Lost HTTP responses when using multiple af-packet threads

Yes, my kernel is 4.6.2.
I've just tried 3.13.0-32, and have been unable to reproduce it so far. Fascinating :) WGH WGH

07:32 AM Suricata Bug #1834: Lost HTTP responses when using multiple af-packet threads

I'm not quite sure it's applicable to loopback device. WGH WGH

06/29/2016

01:37 PM Suricata Bug #1834 (Closed): Lost HTTP responses when using multiple af-packet threads

The attached .pcap-file contains a single TCP connection with 100 HTTP requests in it. The client closes TCP connecti... WGH WGH

01:09 PM Suricata Bug #1833 (Closed): Transaction can be logged before stream reassembly and parsing are complete

I believe bug #1433 can still be observed as of recent Suricata version.
The attached .pcap-file contains a HTTP s... WGH WGH