Open Information Security Foundation

10/08/2024

CD 08:09 PM Suricata Feature #6293: Support disabling forced flow reuse in low memory conditions

This feature was requested due to HTTP packets, from a previously blocked TCP connection, getting through during high traffic load. This occurred when a blocked TCP connection's flow was re-used and subsequent packets from the previously... Cole Dishington

CD 06:54 PM Suricata Feature #6260: flow: flow matching excluding packet recursion level

This feature should address the issue in https://forum.suricata.io/t/suricata-on-ipip-tunneled-packets/4850/2 Cole Dishington

06/30/2024

CD 09:33 PM Suricata Bug #6291 (Closed): Performance degradation on Suricata devices with a small number of rules

@catenacyber I haven't yet been able to get the latest Suricata compiling with my toolchain (due to mismatch of archs in the lua .o files). I will re-test when I am able to get the newer versions of Suricata working with my toolchain, un... Cole Dishington

01/24/2024

CD 02:21 AM Suricata Feature #6293: Support disabling forced flow reuse in low memory conditions

PR=https://github.com/OISF/suricata/pull/10232
SV_PR=https://github.com/OISF/suricata-verify/pull/1607 Cole Dishington

01/22/2024

CD 09:38 PM Suricata Bug #6291 (In Review): Performance degradation on Suricata devices with a small number of rules

Cole Dishington

01/21/2024

CD 09:46 PM Suricata Bug #6291: Performance degradation on Suricata devices with a small number of rules

PR: https://github.com/OISF/suricata/pull/10202 Cole Dishington

CD 09:30 PM Suricata Feature #6260: flow: flow matching excluding packet recursion level

PR: https://github.com/OISF/suricata/pull/10214
SV-PR: https://github.com/OISF/suricata-verify/pull/1597 Cole Dishington

09/04/2023

CD 07:50 PM Suricata Bug #6291: Performance degradation on Suricata devices with a small number of rules

Peter Manev wrote in #note-1:
> Can you share some steps or details how to reproduce the performance degradation issue please?
> ...
I experienced the performance degradation when updating from Suricata 4.0.6 to Suricata 7.0.0, this pe... Cole Dishington

CD 01:19 AM Suricata Feature #6293 (In Progress): Support disabling forced flow reuse in low memory conditions

By default, flow reuse is forced in low memory conditions no matter the state of the flow (see "src/flow-hash.c:FlowGetNew:690":https://github.com/OISF/suricata/blob/master/src/flow-hash.c#L690).
Could we add some config to optionally... Cole Dishington

CD 12:15 AM Suricata Bug #6292 (Closed): Flow manager stuck forever on race condition for return stack

The return stack queue is checked before obtaining the lock in "src/tmqh-packetpool.c:118":https://github.com/OISF/suricata/blob/master/src/tmqh-packetpool.c#L118. This leaves a small window where the FlowManager thread is waiting for th... Cole Dishington