Open Information Security Foundation

01/16/2019

05:00 PM Suricata Feature #2507: Make Rust mandatory

FYI: Rustified Suricata 4.1.2 is now available in Debian stretch-backports (and will also be in buster). A cargo pack... Sascha Steinbiss

12/05/2018

01:27 PM Suricata-Update Optimization #2728 (Closed): enable repeated calls of enable/disable-source

At the moment, trying to enable a source that is already enabled will result in suricata-update failing with a return... Sascha Steinbiss

06/03/2018

10:04 AM Suricata Feature #2507: Make Rust mandatory

Andreas Herz wrote:
> Is there a good way to get it running on Debian 9 somehow?
If it's just about OISF providin... Sascha Steinbiss

06/02/2018

11:33 AM Suricata Bug #2355: Missing events with PF_RING 7.1.0

Hi Peter,
coming back to the original issue. I've retried with the latest PF_RING (7.1.0 ($Revision: dev:e59670fbb... Sascha Steinbiss

03/13/2018

12:54 PM Suricata Bug #2355: Missing events with PF_RING 7.1.0

finally, here are the configs for my test setup:
* http://paste.debian.net/hidden/676b35d0/ (startup output of @su... Sascha Steinbiss

12:48 PM Suricata Bug #2355: Missing events with PF_RING 7.1.0

FYI, I also updated Suricata to the latest git master (19988310d1dfe941be7fd9231a64c98aba7391d2) and PF_RING to the l... Sascha Steinbiss

12:30 PM Suricata Bug #2355: Missing events with PF_RING 7.1.0

I just tried this after disabling VLAN offloading in the VM:... Sascha Steinbiss

12:15 PM Suricata Bug #2355: Missing events with PF_RING 7.1.0

Hi Peter, thanks for checking in. It's not an urgent issue anymore, as we took this opportunity to switch our stack b... Sascha Steinbiss

01/15/2018

10:37 AM Suricata Bug #2355: Missing events with PF_RING 7.1.0

> I guess the best way to check 'for real' would be to try it on a low risk sensor that sees live traffic, but most l... Sascha Steinbiss

12/24/2017

07:32 AM Suricata Bug #2355: Missing events with PF_RING 7.1.0

Hi Peter,
thanks for your offer to help.
> Just so I understand correctly -
> On a Vm on the main interface i... Sascha Steinbiss