Open Information Security Foundation

11/23/2020

08:11 PM Suricata Feature #4159: Log flow age as fractional value

Jason Ish wrote in #note-4:
> Yes, in theory this should be fine. Every JSON parser I've used parses numbers in JSON... Sascha Steinbiss

11/20/2020

10:44 AM Suricata Feature #4159: Log flow age as fractional value

Sascha Steinbiss wrote in #note-2:
> Indeed it would!
Just took another look at the JSON RFC, and it actually ,stric... Sascha Steinbiss

11/19/2020

10:29 PM Suricata Feature #4159: Log flow age as fractional value

Indeed it would! Sascha Steinbiss

02:14 PM Suricata Feature #4159 (New): Log flow age as fractional value

At the moment, @flow.age@ in EVE JSON is an integer value in seconds. This is likely to be too coarse a resolution to... Sascha Steinbiss

11/08/2020

05:10 PM Suricata Bug #4109: mac address logging crash

https://github.com/OISF/suricata/pull/5551 Sascha Steinbiss

03:57 PM Suricata Bug #4109: mac address logging crash

One more thing, could we possibly use the pcaps provided by you as test cases for public integration tests (via https... Sascha Steinbiss

03:55 PM Suricata Bug #4109 (In Review): mac address logging crash

Sascha Steinbiss

03:54 PM Suricata Bug #4109: mac address logging crash

Jan Hugo Prins wrote in #note-25:
> I just wanted to confirm the same.
> Thanks for the good work.
> I hope this ... Sascha Steinbiss

03:22 PM Suricata Bug #4109: mac address logging crash

Jan Hugo Prins wrote in #note-22:
> I have a pcap file that is able to crash my Suricata instance.
> I have added t... Sascha Steinbiss

12:03 PM Suricata Bug #4109: mac address logging crash

I think I found the bug. It looks like we're assuming a flow exists to look up a storage for, but we must consider th... Sascha Steinbiss