Open Information Security Foundation

09/04/2023

07:50 PM Suricata Bug #6291: Performance degradation on Suricata devices with a small number of rules

Peter Manev wrote in #note-1:
> Can you share some steps or details how to reproduce the performance degradation issu... Cole Dishington

01:19 AM Suricata Feature #6293 (New): Support disabling forced flow reuse in low memory conditions

By default, flow reuse is forced in low memory conditions no matter the state of the flow (see "src/flow-hash.c:FlowG... Cole Dishington

12:15 AM Suricata Bug #6292 (New): Flow manager stuck forever on race condition for return stack

The return stack queue is checked before obtaining the lock in "src/tmqh-packetpool.c:118":https://github.com/OISF/su... Cole Dishington

09/03/2023

10:51 PM Suricata Bug #6291 (New): Performance degradation on Suricata devices with a small number of rules

Devices running a small number of rules, none of which being MPM-based rules, experienced a performance degradation o... Cole Dishington

08/08/2023

10:05 PM Suricata Bug #6260: Support flow matching excluding packet recursion level

Added pull requests for suricata and suricata-verify:
https://github.com/OISF/suricata/pull/9363
https://github.com... Cole Dishington

09:40 PM Suricata Bug #6260 (In Review): Support flow matching excluding packet recursion level

Add config for controlling the use of packet recursion level in the flow (and defrag) hashing. Packet recursion shoul... Cole Dishington

08/03/2023

09:31 PM Suricata Bug #6243: Parsing ip-reputation reputation config files now rejects CR and CR+LF

Cole Dishington wrote:
> Previously, parsing ip-rep values in reputation config files (https://docs.suricata.io/en/s... Cole Dishington

07/31/2023

11:34 PM Suricata Bug #6243 (Closed): Parsing ip-reputation reputation config files now rejects CR and CR+LF

Previously, parsing ip-rep values in reputation config files (https://docs.suricata.io/en/suricata-6.0.0/reputation/i... Cole Dishington

07/19/2023

10:21 PM Suricata Bug #6222 (Closed): Decode-events of IPv6 GRE are not triggered

Detection of decode-events of IPv6 GRE packets are not triggered if the GRE decoding fails. I have attached a pcap, t... Cole Dishington

05/25/2023

03:58 AM Suricata Bug #6087 (Closed): FTP bounce detection doesn't work for big-endian platforms

FTP bounce detection has false positives and false negatives on platforms where host byte order is the same as networ... Cole Dishington