Project

General

Profile

8.0.0-beta1

open

Due in about 6 months (06/04/2024)

6%

392 issues   (14 closed — 378 open)

Issues by
Bug

4/68
Feature

6/103
Optimization

1/42
Task

2/107
Documentation

1/71
Security

0/1
Related issues
Bug #635: Some keywords missing in list-keyword command (like 'tcp-pkt') Actions
Bug #1826: Rule validation bug with fast_pattern:only and specified buffers Actions
Bug #1926: rule parsing: wrong content checked for fast_pattern (snort compatibility) Actions
Bug #1983: tls: events are directionless and trigger twice per flow direction Actions
Bug #2205: Buffer confusion with fast_pattern:only; Actions
Bug #2224: Negated http_* match returns false if buffer not populated Actions
Bug #2881: http.protocol parsing inaccuracy : accept spaces in URI Actions
Bug #2886: IMAP protocol detection is incomplete Actions
Bug #2908: ip only rules cause suricata to take 17 minutes to start Actions
Bug #3182: warn user on wildcard usage without quotes Actions
Bug #3218: ssl_state does the wrong thing Actions
Bug #3236: missing keywords docs on some keywords when --list-keywords is called Actions
Bug #3375: Tracking: file tracking/inspection performance issues Actions
Bug #3436: Suricata Socket Control crashing using command 'reopen-log-files' Actions
Bug #3682: bsize needs to err upon non possible matching conditions Actions
Bug #3910: datasets: for type string the memcap isn't applied to the string data Actions
Bug #4135: dns: response only udp not detected as dns Actions
Bug #4220: failed to hit a signature with option --simulate-ips Actions
Bug #4482: detect: detect events not in rules, not tested (and not working?) Actions
Bug #4522: Rules with stream_size greater than not working Actions
Bug #4571: Unable to trigger rule by content in case of IPv4 in IPv4 incapsulation Actions
Bug #4702: SYN/ACK dropped when client does not support tcp timestamps Actions
Bug #4786: xbits: no error on invalid 'expire' values Actions
Bug #4815: unix socket: ftp memcap missing from socket commands Actions
Bug #4873: smb: midstream probing check affects performance Actions
Bug #4898: detect: Ensure detection events are logged Actions
Bug #4917: tls: leading GAP in toserver direction leads to various issues Actions
Bug #4921: detect/app-layer-protocol: unexpected results when one direction state "failed" Actions
Bug #5031: flowbits - no error on invalid options Actions
Bug #5037: invalid timestamp in ending events Actions
Bug #5076: keyword content does not work over reassembled TCP Actions
Bug #5165: http: request not logged when response comes before request Actions
Bug #5177: detect/engine-analyzer: rule analyzer warns about http buffers usage/replacement even when using new keyword Actions
Bug #5196: Suricata test mode should fail when there are invalid config values Actions
Bug #5220: fast_pattern specification in base64_data shouldn't be allowed Actions
Bug #5486: Ethernet metadata is missing for some protocols or parts of a protocol Actions
Bug #5524: PGSQL parser should not error on parsing error, so as to keep on parsing the next PDUs Actions
Bug #5539: landlock: coverity warnings Actions
Bug #5689: community id computed wrong for tcp and ipv4 when src_ip == dest_ip Actions
Bug #5711: runmodes: Suricata does not hint anything about missing runmode Actions
Bug #5977: eve/alert: missing KRB5 metadata Actions
Bug #6080: pgsql/probe: TCP on 5432 traffic incorrectly tagged as PGSQL Actions
Bug #6186: Integer overflows 64 to 32 bytes Actions
Bug #6260: Support flow matching excluding packet recursion level Actions
Bug #6275: fail af_xdp at configure time when libxdp is missing? Actions
Bug #6281: dns: structure of query differs between "alert" and "dns" event types Actions
Bug #6291: Performance degradation on Suricata devices with a small number of rules Actions
Bug #6304: schema.json : if protocol such as ENIP is detection only, we do not have _tcp suffix in stats Actions
Bug #6305: drop: assertion failed !(PKT_IS_PSEUDOPKT(p)) && !PacketCheckAction(p, ACTION_DROP) Actions
Bug #6370: plugins: install libsuricata-config by default, or with headers Actions
Bug #6393: detect/filestore: be more explicit about the U16_MAX limit per signature group head Actions
Bug #6394: Sudden increase in capture.kernel_drops and tcp.pkt_on_wrong_thread after upgrading to 6.0.14 Actions
Bug #6414: detect-engine/port: recursive DetectPortInsert calls are expensive Actions
Bug #6415: http.header, http.header.raw and http.request_header buffers not populated when malformed header value exists Actions
Bug #6418: detect/engine-analyzer: rule parser error uses outdated buffer Actions
Bug #6419: dpdk: Analyze hugepage allocation on startup also with dpdk-hugepage script Actions
Bug #6499: tcp.active_sessions and flow.active count will never reduce when using trex Actions
Bug #6500: eve/alert: missing FTP metadata Actions
Bug #6501: eve/alert: missing TFTP metadata Actions
Bug #6527: cppcheck 2.11 errors Actions
Bug #6547: HTTP/2 - http.response_line has leading space Actions
Bug #6551: Invalid registration of prefiltering in stream size Actions
Bug #6553: eve/alert: payload/payload_printable misrepresent data in case of overlaps Actions
Bug #6574: detect/filestore: memory leak on rule parsing Actions
Bug #6578: ssh: no alert on packet with Message Code: New Keys (21) Actions
Bug #6584: SCTIME_ADD_SECS() macro zeros out ts.usec part Actions
Bug #6585: SCTIME_FROM_TIMESPEC() creates incorrect timestamps Actions
Bug #6592: mqtt: frames on TCP are not set properly when parsing multiple PDUs in one go Actions
Feature #845: Memory consumption in stats.log Actions
Feature #1005: conditional logging: controlling what gets logged Actions
Feature #1065: Introduce vlan id keyword Actions
Feature #1199: protocol: LDAP support Actions
Feature #1520: multitenancy - verbose output clarity Actions
Feature #1542: dump-config - extend into multi-detect supplied yaml configuration Actions
Feature #1993: commandline: introduce --enable-all-outputs switch Actions
Feature #2290: lua: use script as transform Actions
Feature #2375: Design and implement sensible per-thread capabilities Actions
Feature #2377: deprecate: ssh.softwareversion and ssh.protoversion Actions
Feature #2448: Add additional buffers for DNS Responses Actions
Feature #2486: prefilter/fast_pattern logic for flowbits Actions
Feature #2678: list-keywords: add info about fast_pattern and transforms Actions
Feature #2695: websocket support Actions
Feature #2696: http parser in rust Actions
Feature #2816: vlan: support more than 2 layers Actions
Feature #2958: Suricata 5.0.0beta1 and way too much anomaly logging Actions
Feature #3003: filestore to uses rename syscall instead of sendfile,which doesn't allow files to be sent across file systems Actions
Feature #3351: sip: parse traffic over tcp Actions
Feature #3487: multi-part parser in Rust Actions
Feature #3636: eve: configuration options to enable all, none or just a default set of outputs Actions
Feature #3952: mDNS protocol implementation Actions
Feature #3953: 8021BR E packet decoder Actions
Feature #3958: Convert protocol to Rust: ENIP Actions
Feature #4089: rules: Flexible format transform Actions
Feature #4099: allow rule keyword registration from app-layer Actions
Feature #4136: use Suricata-Update managed classification.config Actions
Feature #4153: Rust parsers: Make use of Rust derive style macros to generate common code in parsers Actions
Feature #4174: tracking: app-layer frame inspection support Actions
Feature #4217: not complete cmd start line does not produce expliccit enough warning or msg Actions
Feature #4226: bsize: apply as depth to patterns Actions
Feature #4566: pgsql: add subprotocol-states Actions
Feature #4660: base64_decode cannot used with Transformations like pcrexform Actions
Feature #4776: lua: vendor latest lua stable Actions
Feature #4777: lua: implement sandboxing Actions
Feature #4853: eve: Add information about Suricata version Actions
Feature #4854: pgsql: Add COPY subprotocol-state Actions
Feature #4855: rules: refactor rule parsing into multi-stage parser Actions
Feature #4861: smb: support multi-stream file transfers Actions
Feature #4876: Additional FTP Buffers Actions
Feature #4904: dcerpc: add stream app-layer records support Actions
Feature #4905: smtp: add stream app-layer frame support Actions
Feature #4906: ftp: add stream app-layer frame support Actions
Feature #4910: dpdk: implement secondary mode Actions
Feature #4986: postgresql: support frames Actions
Feature #4990: eve/frames: make payload logging configurable Actions
Feature #5029: eve: telnet logger Actions
Feature #5049: detect/frames: allow mixing with txs Actions
Feature #5075: smb: keyword for the SMB version Actions
Feature #5082: smb: keyword for matching the SMB files Actions
Feature #5194: tracking: options for simulating various exceptions Actions
Feature #5203: dpdk: implement primary app for Suricata secondary mode Actions
Feature #5217: ips: allow dropping of flow if applayer specific memcap is hit Actions
Feature #5234: SSL/TLS Sticky Buffer for subjectAltName Actions
Feature #5286: ips: allow dropping of packet/flow when alert queue exceeded Actions
Feature #5415: tftp: support keywords such as file.name, file.data etc... Actions
Feature #5446: allow ranges in dns.opcode value Actions
Feature #5466: detect: allow alert-then-pass logic Actions
Feature #5495: implement grace period for midstream exception policy Actions
Feature #5642: DNS: parity between log fields and detection Actions
Feature #5664: "Scope" bits should have an expiration Actions
Feature #5692: Add brotli content encoding to HTTP/1.1 Actions
Feature #5726: ike: add frame support Actions
Feature #5737: smtp body extract Actions
Feature #5773: Support DNS over HTTPS (DoH) Actions
Feature #5775: http.headers - dynamic sticky buffers Actions
Feature #5816: Exception policy stats counters Actions
Feature #5826: frames: logging of events set on frames Actions
Feature #5838: dpdk: NIC encapsulation stripping Actions
Feature #5839: dpdk: power saving mode Actions
Feature #5845: smb: Support SMB_COM_SESSION_SETUP_ANDX Request Actions
Feature #5972: rules: "requires" keyword representing the minimum version of suricata to support the rule Actions
Feature #5973: warn when HTTP rules will only work for a specific version of HTTP Actions
Feature #5974: Midstream exception policy "reject-both" support Actions
Feature #5976: eve/stats: allow hiding counters whose value is 0 Actions
Feature #6012: dpdk: add support for segmented mbufs Actions
Feature #6079: eve/dcerpc: eve/smb: log dcerpc uuid with request/response txs Actions
Feature #6114: dpdk: wrap DPDK logs in a Suricata logger Actions
Feature #6164: detect: new keyword flow.pkts_toclient to server and bytes as well Actions
Feature #6210: outputs: add verdict event type Actions
Feature #6215: Exception policy log output Actions
Feature #6237: Multi-tenancy: Allow inner VLAN to be selected Actions
Feature #6259: pgsql: add `query` detection keyword Actions
Feature #6261: Add GRE as a parsible protocol Actions
Feature #6290: support case insensitive testing of HTTP header name existence Actions
Feature #6293: Support disabling forced flow reuse in low memory conditions Actions
Feature #6366: pop3 protocol detection Actions
Feature #6368: stream/midstream: wscale setting Actions
Feature #6374: Sticky buffers for sip headers Actions
Feature #6379: JA4 support for TLS and QUIC Actions
Feature #6396: Add protocol string support for mqtt Actions
Feature #6399: Per-thread stats values can be negative Actions
Feature #6410: Log packets/bytes per second in Suricata stats Actions
Feature #6422: dpdk: expand on DPDK allocation hints Actions
Feature #6426: HTTP/2 - app-layer-event and normalization when userinfo is in the :authority pseudo header for the http.host header Actions
Feature #6439: New Transformation: to_lowercase Actions
Feature #6455: txbits: support for new type of bits Actions
Feature #6459: filebits: support for new type of bits Actions
Feature #6480: plugins: allow plugins to specify the version of suricata they are for Actions
Feature #6487: transform: from_base64 Actions
Feature #6496: dns: new detection buffer: dns.answer.name Actions
Feature #6497: dns: new detection buffer: dns.query.name Actions
Feature #6550: Capability to have rules profiling on pcap run Actions
Optimization #2272: Analyze DNS response if query is not present Actions
Optimization #2621: Convert setup scripts from sh/ed/sed to Python. Actions
Optimization #3427: Issue warning/info msg upon datasets of type string that are not base64 Actions
Optimization #3449: output calls fflush very often Actions
Optimization #3540: krb5: use app-layer incomplete support Actions
Optimization #3707: Convert JSON Loggers to JsonBuilder Actions
Optimization #3766: Convert Stats to JsonBuilder Actions
Optimization #3827: clean up logging initialization code Actions
Optimization #4490: rust: see if we can use SuricataStreamingBufferConfig Actions
Optimization #4517: cbindgen export the constants from Rust to C, also for macro such as BIT_U8(1), and remove duplicate definitions between rust and C Actions
Optimization #4747: app-layer: make tx iterator a mandatory part of the API Actions
Optimization #4753: Fix inconsistency in Lua functions for the "needs" key Actions
Optimization #4809: stats: human readable sizes in the stats.log Actions
Optimization #4937: Convert Rule Profile JSON output to JsonBuilder Actions
Optimization #4950: Code improvement in KRB5State.parse function Actions
Optimization #4987: frames: unify handling of getting frame data, flags Actions
Optimization #5047: sip: implement pattern based protocol detection Actions
Optimization #5180: detect/alert: make sure that signatures with `drop` action are respected, even if the alert is discarded Actions
Optimization #5207: Common Rust parser for *bits Actions
Optimization #5311: ftp: use unsigned integer for input_len Actions
Optimization #5476: decoder: compact & flexible storage of decoder data in the packet Actions
Optimization #5517: decode: big clean up (macros and functions) Actions
Optimization #5545: prefilter keyword: increase code coverage Actions
Optimization #5566: pgsql: add events Actions
Optimization #5583: output: iface shortening more compact Actions
Optimization #5672: smb: avoid unbounded hash maps Actions
Optimization #5699: dcerpc: switch to incomplete api for tcp Actions
Optimization #5785: smb: use u32.to_be_bytes to replace function u32_as_bytes Actions
Optimization #5787: detect/filestore: optimize http tx handling Actions
Optimization #5801: filemagic keywords: increase code coverage and update documentation (if need be) Actions
Optimization #6001: investigate: optional/configurable stats log verbosity Actions
Optimization #6002: stats/exception: allow configuring verbosity via unix socket Actions
Optimization #6061: cmdline: make --list-runmodes output friendlier Actions
Optimization #6111: defrag: avoid passing null pointers to functions Actions
Optimization #6188: ConfYamlLoadString: handle allocation failures Actions
Optimization #6225: exception: standardize log message about set-up value Actions
Optimization #6387: mqtt: move parser registration code to the rust side Actions
Optimization #6433: packetpool: improve return sync logic Actions
Optimization #6454: Force os to release memory on rule reload Actions
Optimization #6502: schema: avoid - and . in keys Actions
Optimization #6569: threading: fix condition signalling w/o taking lock first Actions
Optimization #6572: runmodes: fix `--list-runmodes` output Actions
Task #2693: tracking: libsuricata Actions
Task #3153: tracking: scan-build warnings Actions
Task #3166: src code file reorg Actions
Task #3334: Cleanup registration of C function pointers in SuricataContext in main() Actions
Task #3343: tracking: developer documentation Actions
Task #3695: research: libhwloc for better autoconfiguration Actions
Task #3836: Formatting rust code Actions
Task #4022: Convert unittests to new FAIL/PASS API - detect-engine-address-ipv4.c Actions
Task #4023: Convert unittests to new FAIL/PASS API: detect-engine-address-ipv6.c Actions
Task #4082: Convert FTP to Rust Actions
Task #4098: Convert SMTP to Rust Actions
Task #4103: Plugins: Convert a "core" parser (DNS) to use the plugin API Actions
Task #4105: Plugins: Create template capture source plugin Actions
Task #4122: tracking: handle various TLS decrypt headers in proxies and decryption tools Actions
Task #4143: tracking: file.data improvements Actions
Task #4176: plugins: review capture plugin API Actions
Task #4429: libsuricata: Use cases with examples Actions
Task #4683: detect: remove sigmatch_table in favor of a dynamic storage option Actions
Task #4698: Example program to bootstrap Suricata (an alternate main() for Suricata) Actions
Task #4704: unix-socket: separate functionality from the unix socket interface Actions
Task #4707: detect: unify internal buffer names to use <proto>.<buffer> naming Actions
Task #4742: Make the auto-generated config.h not conflict with other config.h. Actions
Task #4773: research: IPS behavior wrt resource limits Actions
Task #4799: af-packet: review iface up/down logic Actions
Task #4919: Add option to change sensor-name log field Actions
Task #4936: Use Rust to parse unix socket messages Actions
Task #5050: rules/frames: settle on rule syntax Actions
Task #5053: app-layer: dynamic alproto IDs Actions
Task #5181: detect/engine-analyzer: add rule analyzer warnings about rules that could use the frame keyword/semantics/feature Actions
Task #5472: tracking: upgrading from 6 to 7 Actions
Task #5510: stream (midstream): investigate - Suri drops flow but still logs second packet of the flow Actions
Task #5560: dpdk: Design a test-case for Suricata running as a secondary process Actions
Task #5588: ips/tap: don't allow mixed tap and ips modes Actions
Task #5610: tracking: new protocol: telnet Actions
Task #5626: doc: document file.data Actions
Task #5682: tracking: smb performance issues Actions
Task #5827: [investigate] output/drop: make `drop reason` more informative Actions
Task #5840: dpdk: Design test cases for DPDK capture interface Actions
Task #6028: c: C11 _s style buffer handling calls Actions
Task #6029: c: require C11 Actions
Task #6050: base64: make a fuzz target Actions
Task #6084: output/alert: enable logging `PASS` alerts Actions
Task #6107: Convert unittests to new FAIL/PASS API - util-memcmp.c Actions
Task #6179: tracking: flash decompression deprecation and removal Actions
Task #6184: flash decompression: remove feature Actions
Task #6209: libhtp 0.5.46 Actions
Task #6217: research: increased tcp.overlap after file data changes Actions
Task #6258: misc: clean-up commented out code Actions
Task #6262: tracking: reduce stack usage Actions
Task #6273: misc: clean up left over printf calls Actions
Task #6308: detect/analyzer: add more keyword details Actions
Task #6309: detect/analyzer: add more details for the flowbits keyword Actions
Task #6310: detect/analyzer: add more details for the ttl keyword Actions
Task #6311: detect/analyzer: add more details for the flowint keyword Actions
Task #6312: detect/analyzer: add more details for the flow.age keyword Actions
Task #6314: Convert unittests to new FAIL/PASS API - tests/detect-http-client-body.c Actions
Task #6315: Convert unittests to new FAIL/PASS API - ippair-storage.c Actions
Task #6316: Convert unittests to new FAIL/PASS API - app-layer-detect-proto.c Actions
Task #6317: Convert unittests to new FAIL/PASS API - detect-filestore.c Actions
Task #6318: Convert unittests to new FAIL/PASS API - detect-engine-address-ipv4.c Actions
Task #6319: Convert unittests to new FAIL/PASS API - util-bloomfilter.c Actions
Task #6320: Convert unittests to new FAIL/PASS API - detect-base64-data.c Actions
Task #6321: Convert unittests to new FAIL/PASS API - decode-raw.c Actions
Task #6322: Convert unittests to new FAIL/PASS API - util-pool.c Actions
Task #6323: Convert unittests to new FAIL/PASS API - ippair-bit.c Actions
Task #6324: Convert unittests to new FAIL/PASS API - stream-tcp-reassemble.c Actions
Task #6325: Convert unittests to new FAIL/PASS API - detect-urilen.c Actions
Task #6326: Convert unittests to new FAIL/PASS API - detect-ssh-software-version.c Actions
Task #6327: Convert unittests to new FAIL/PASS API - threads.c Actions
Task #6330: Convert unittests to new FAIL/PASS API - tests/stream-tcp-list.c Actions
Task #6331: Convert unittests to new FAIL/PASS API - util-bloomfilter-counting.c Actions
Task #6333: Convert unittests to new FAIL/PASS API - util-rule-vars.c Actions
Task #6334: Convert unittests to new FAIL/PASS API - util-spm.c Actions
Task #6335: Convert unittests to new FAIL/PASS API - decode-tcp.c Actions
Task #6336: Convert unittests to new FAIL/PASS API - tests/detect-http-stat-code.c Actions
Task #6338: Convert unittests to new FAIL/PASS API - tests/detect-http-stat-msg.c Actions
Task #6340: Convert unittests to new FAIL/PASS API - tests/detect-http-method.c Actions
Task #6341: Convert unittests to new FAIL/PASS API - decode-ethernet.c Actions
Task #6343: Convert unittests to new FAIL/PASS API - tests/stream-tcp.c Actions
Task #6344: Convert unittests to new FAIL/PASS API - detect-pcre.c Actions
Task #6346: Convert unittests to new FAIL/PASS API - detect-engine-dcepayload.c Actions
Task #6350: detect/analyzer: add more details for the tcp.flags keyword Actions
Task #6351: detect/analyzer: add more details for the xbits keyword Actions
Task #6352: detect/analyzer: add more details for the tcp window keyword Actions
Task #6353: detect/analyzer: add more details for the tcp seq keyword Actions
Task #6354: detect/analyzer: add more details for the tcp ack keyword Actions
Task #6355: detect/analyzer: add more details for the tcp.mss keyword Actions
Task #6356: detect/analyzer: add more details for the tcp.hdr keyword Actions
Task #6357: detect/analyzer: add more details for the dsize keyword Actions
Task #6358: detect/analyzer: add more details for the ICMP itype keyword Actions
Task #6359: detect/analyzer: add more details for the ICMP icode keyword Actions
Task #6360: detect/analyzer: add more details for the icmp_id keyword Actions
Task #6382: Add DPDK 23.11 build to Github Actions Actions
Task #6427: runmodes: remove reference to auto modes Actions
Task #6432: tracking: autofp capture stalls due to packetpool depletion Actions
Task #6474: detect: smtp body inspection keyword Actions
Task #6485: [investigate] Scoring method for keywords and transforms Actions
Task #6488: plugins: add example plugins to the suricata source tree Actions
Task #6489: test/stream/tcp-list: fix unittests Actions
Task #6542: logging: deprecate tls-log Actions
Task #6543: logging: deprecate http-log Actions
Task #6544: logging: deprecate syslog Actions
Task #6545: tls-store: unify with file-store Actions
Task #6573: rust: set new minimum Rust version for Suricata 8 Actions
Task #6576: pgsql: log identifier for unknown messages? Actions
Task #6577: pgsql: add cancel request message Actions
Task #6586: mpm/ac-bs: remove implementation Actions
Documentation #2620: Documentation: tagged_packets / event_type packet Actions
Documentation #3015: userguide: document "tag" keyword Actions
Documentation #3748: Add documentation for flags keyword Actions
Documentation #4350: Devguide: transaction handling logic Actions
Documentation #4352: Devguide: Debugging Basics - pcap_cnt Actions
Documentation #4557: Add document about JsonBuilder Actions
Documentation #4658: Add/improve documentation for pcre substring capture logging Actions
Documentation #4705: userguide: add sections about frame support Actions
Documentation #4706: Guide for rulewriting Actions
Documentation #4708: DevGuide: Add Eve Output Plugins Actions
Documentation #4709: Add page about analyzing Suricata performance Actions
Documentation #4980: doc/frames: document frame rule keyword Actions
Documentation #5008: userguide: add a protocol chart listing defaults Actions
Documentation #5068: nfs: document rule keyword Actions
Documentation #5078: suricata config reload: improve documentation on behavior Actions
Documentation #5088: file.name sticky buffer is not documented Actions
Documentation #5138: userguide: add a section for fileinfo eve type Actions
Documentation #5139: userguide: add a section for netflow event type Actions
Documentation #5274: devguide: document how the alert flow works Actions
Documentation #5393: devguide: move github workflow document from redmine into devguide Actions
Documentation #5449: userguide: document how suricata processes rules internally Actions
Documentation #5465: doc/userguide: document terminating behavior of rule actions Actions
Documentation #5494: userguide: update tls eve-log fields 'not_before' and 'not_after' Actions
Documentation #5513: userguide: add a chapter for IPS mode Actions
Documentation #5531: userguide: ensure documentation is up to date Actions
Documentation #5532: userguide: have a section to mention and document the various ways stream-depth can be set Actions
Documentation #5534: userguide: better document what TCP midstreams are for Suricata Actions
Documentation #5543: userguide: document which keywords accept the prefilter keyword Actions
Documentation #5554: userguide: document behavior for actions like PASS, DROP, REJECT, BYPASS... Actions
Documentation #5575: docs: bring 'reporting bugs page' into userguide and update it Actions
Documentation #5612: devguide: add a chapter about Suricata's exception policies Actions
Documentation #5651: bsize: format should specify operators Actions
Documentation #5690: Document the differences between IPS and IDS mode. Actions
Documentation #5829: userguide: add context on "why/when an exception policy is applied" Actions
Documentation #5830: userguide: update & improve exception policy section Actions
Documentation #5842: userguide: bring session about Suricata installation from Ubuntu PPA Actions
Documentation #5869: userguide: describe what are the delta stats counters Actions
Documentation #5891: userguide: explain different log save directory in offline mode Actions
Documentation #5897: devguide: add section on generating code coverage reports locally Actions
Documentation #5910: devguide: explain possible differences in data inspection with inline stream or not Actions
Documentation #5911: userguide: update & bring guide for installation on Windows to RtD Actions
Documentation #6022: devguide: explain how the engine identifies applayer protocols Actions
Documentation #6026: userguide/suricata-yaml: update image on threading Actions
Documentation #6030: devguide: expand Suricata Internals chapter Actions
Documentation #6058: doc/configuration: clarify sig_id & gid_id for global threshold Actions
Documentation #6069: userguide/install: move RPM distros to their own page Actions
Documentation #6076: eve/schema: document quic Actions
Documentation #6180: userguide: add troubleshooting section Actions
Documentation #6219: userguide: add page about different usecases Actions
Documentation #6252: userguide/install: move Ubuntu distros to their own page Actions
Documentation #6270: userguide: document usage of Suricata as a firewall Actions
Documentation #6284: userguide: document what's the impact of `stream.inline` Actions
Documentation #6361: userguide: add note about severity<-> priority on alert section Actions
Documentation #6369: stream: document stream.3whs_syn_flood and stream.3whs_synack_flood Actions
Documentation #6406: userguide: remove ambiguous "we" usages Actions
Documentation #6412: devguide: API upgrade notes Actions
Documentation #6434: eve/schema: document stats Actions
Documentation #6442: rtd: indicate that a page is for an outdated version Actions
Documentation #6445: userguide: explain what flow_id is Actions
Documentation #6450: userguide: add section about sshhash Actions
Documentation #6451: userguide: update 'what is suricata' section Actions
Documentation #6452: userguide/ftp: clarify usage around ftp and ftp.data keyword Actions
Documentation #6478: schema: add missing fields Actions
Documentation #6484: userguide: add keyword performance results Actions
Documentation #6486: userguide: explain pkt_on_wrong_thread counter Actions
Documentation #6492: doc: explain how FTP works Actions
Documentation #6495: userguide: add section on SMTP event type Actions
Documentation #6498: userguide/output: add section about fileinfo Actions
Documentation #6566: userguide: add description for missing EVE krb fields Actions
Documentation #6568: devguide: document backports policies and process Actions
Documentation #6589: docs: fix broken bulleted list style on rtd Actions
Security #6187: DetectEngineReload: handle allocation failures Actions