Open Information Security Foundation

05/31/2023

09:30 PM Suricata Bug #6057 (Closed): rust/jsonbuilder: better handling of memory allocation errors

Merged: https://github.com/OISF/suricata/pull/8927 Jason Ish

09:27 PM Suricata Task #5939 (Closed): config: deprecate multiple "include" statements at the same level

Documentation has now been merged, closing.
Jason Ish

05/26/2023

07:46 PM Suricata Documentation #6098 (New): eve/dns: generate example dns output

Jason Ish

07:46 PM Suricata Documentation #6097 (New): eve/dhcp: generate example dhcp output

Jason Ish

07:45 PM Suricata Documentation #6096 (New): eve/app-layer: generate example eve-log for each protocol

Instead of hard-coding in output examples for each protocol, we should generate from Suricata-Verify.
A possible w... Jason Ish

05/25/2023

10:46 PM Suricata Bug #5868: filestore: not saving files when filestore enabled by rule matching on file_data (instead saves 0 bytes)

Further notes:
- Works when filestore is forced
- Fails when a rule matches on file_data to save the file
- Works on ... Jason Ish

10:25 PM Suricata Bug #5868: filestore: not saving files when filestore enabled by rule matching on file_data (instead saves 0 bytes)

I have successfully reproduced on the 6.0.x branch. It is not reproducible on the master branch. The traffic does not... Jason Ish

07:42 PM Suricata-Update Support #5768 (Closed): suricata-update failure on ubuntu 22.04

Jason Ish

07:40 PM Suricata Optimization #3524: Remove unsafe Rust code for ALPROTO_X constants

We already depend on @lazy_static@, so if it solves the problem, sure, its there. Jason Ish

07:31 PM Suricata Documentation #6076: eve/schema: document quic

Document values in @etc/schema@, basically adding a description to all fields logged by @quick@ in this case.
http... Jason Ish