JI Jason Ish
- Login: jish
- Email: jish@oisf.net, jason.ish@gmail.com
- Registered on: 11/09/2009
- Last sign in: 09/02/2026
Issues
| open | closed | Total | |
|---|---|---|---|
| Assigned issues | 81 | 731 | 812 |
| Reported issues | 136 | 454 | 590 |
Projects
| Project | Roles | Registered on |
|---|---|---|
| Suricata | Developer, OISF Team, OISF Manager | 11/09/2009 |
| Suricata-Update | Developer, OISF Team, OISF Manager | 10/31/2017 |
Activity
Today
- JI 04:08 PM Suricata Security #8980: dnp3: framing errors stop transaction inspection for the flow
- AI review caught this,
Medium — src/app-layer-dnp3.c:1112 and src/app-layer-dnp3.c:1246: Invalid start bytes still terminate parsing, so the valid-frame → garbage → valid-frame reproducer from Redmine #8980 continues to suppress subse... - JI 04:03 PM Suricata Security #8981: dnp3: framing errors stop transaction inspection for the flow (8.0.x backport)
- Apply severity from parent ticket: LOW.
- JI 04:03 PM Suricata Security #8982: dnp3: link-layer events before first transaction are dropped (8.0.x backport)
- Apply severity from parent ticket: LOW.
08/31/2026
- JI 10:38 PM Suricata Optimization #1718: Time stamp in Log files should be ISO 8601 format
- James Moe wrote in #note-8:
> Philippe Antoine wrote in #note-7:
> ...
This is EVE format. It should be enough. The time format on stdout and non-EVE is more Americanized, I believe. Will have to be more specific when talking about t... - JI 10:29 PM Suricata Security #8980 (In Review): dnp3: framing errors stop transaction inspection for the flow
- JI 09:35 PM Suricata Security #8980 (In Progress): dnp3: framing errors stop transaction inspection for the flow
- JI 05:48 PM Suricata Security #8980 (In Review): dnp3: framing errors stop transaction inspection for the flow
- ## Summary
Certain malformed DNP3 link-layer input can cause Suricata to stop producing
DNP3 transaction records for the remainder of the TCP connection.
When a stream begins with a frame containing a bad link-header CRC, no DNP3
... - JI 10:29 PM Suricata Security #8979 (In Review): dnp3: link-layer events before first transaction are dropped
- JI 09:40 PM Suricata Security #8979 (In Progress): dnp3: link-layer events before first transaction are dropped
- JI 06:02 PM Suricata Optimization #8686 (Rejected): detect/pcre: usage of \H (character that is not a horizontal white space character) is too slow (7.0.x backport)