Open Information Security Foundation

01/24/2024

02:21 AM Suricata Feature #6293: Support disabling forced flow reuse in low memory conditions

PR=https://github.com/OISF/suricata/pull/10232
SV_PR=https://github.com/OISF/suricata-verify/pull/1607 Cole Dishington

01/22/2024

09:38 PM Suricata Bug #6291 (In Review): Performance degradation on Suricata devices with a small number of rules

Cole Dishington

01/21/2024

09:46 PM Suricata Bug #6291: Performance degradation on Suricata devices with a small number of rules

PR: https://github.com/OISF/suricata/pull/10202 Cole Dishington

09:30 PM Suricata Feature #6260: Support flow matching excluding packet recursion level

PR: https://github.com/OISF/suricata/pull/10214
SV-PR: https://github.com/OISF/suricata-verify/pull/1597 Cole Dishington

09/04/2023

07:50 PM Suricata Bug #6291: Performance degradation on Suricata devices with a small number of rules

Peter Manev wrote in #note-1:
> Can you share some steps or details how to reproduce the performance degradation issu... Cole Dishington

01:19 AM Suricata Feature #6293 (In Review): Support disabling forced flow reuse in low memory conditions

By default, flow reuse is forced in low memory conditions no matter the state of the flow (see "src/flow-hash.c:FlowG... Cole Dishington

12:15 AM Suricata Bug #6292 (Closed): Flow manager stuck forever on race condition for return stack

The return stack queue is checked before obtaining the lock in "src/tmqh-packetpool.c:118":https://github.com/OISF/su... Cole Dishington

09/03/2023

10:51 PM Suricata Bug #6291 (In Review): Performance degradation on Suricata devices with a small number of rules

Devices running a small number of rules, none of which being MPM-based rules, experienced a performance degradation o... Cole Dishington

08/08/2023

10:05 PM Suricata Feature #6260: Support flow matching excluding packet recursion level

Added pull requests for suricata and suricata-verify:
https://github.com/OISF/suricata/pull/9363
https://github.com... Cole Dishington

09:40 PM Suricata Feature #6260 (In Review): Support flow matching excluding packet recursion level

Add config for controlling the use of packet recursion level in the flow (and defrag) hashing. Packet recursion shoul... Cole Dishington