Project

General

Profile

8.0.0-rc1

open

Due in about 2 months (06/10/2025)

2%

128 issues   (3 closed — 125 open)

Issues by
Bug

2/33
Feature

0/13
Optimization

0/4
Task

0/11
Documentation

1/67
Related issues
Bug #2205: Buffer confusion with fast_pattern:only; Actions
Bug #3182: warn user on wildcard usage without quotes Actions
Bug #3236: missing keywords docs on some keywords when --list-keywords is called Actions
Bug #3375: Tracking: file tracking/inspection performance issues Actions
Bug #3436: Suricata Socket Control crashing using command 'reopen-log-files' Actions
Bug #4220: failed to hit a signature with option --simulate-ips Actions
Bug #4482: detect: detect events not in rules, not tested (and not working?) Actions
Bug #4522: Rules with stream_size greater than not working Actions
Bug #4571: Unable to trigger rule by content in case of IPv4 in IPv4 incapsulation Actions
Bug #4702: SYN/ACK dropped when client does not support tcp timestamps Actions
Bug #4786: xbits: no error on invalid 'expire' values Actions
Bug #4815: unix socket: ftp memcap missing from socket commands Actions
Bug #4898: detect: Ensure detection events are logged Actions
Bug #5031: flowbits - no error on invalid options Actions
Bug #5177: detect/engine-analyzer: rule analyzer warns about http buffers usage/replacement even when using new keyword Actions
Bug #5689: community id computed wrong for tcp and ipv4 when src_ip == dest_ip Actions
Bug #6186: Integer overflows 64 to 32 bytes Actions
Bug #6384: rust: configure fails to persistently detect/remember cbindgen location Actions
Bug #6743: stream/tcp: spurious retransmission seen as invalid Actions
Bug #6744: tcp: fast open packet not fully handled Actions
Bug #6776: exception/policy: bypass flow incorrect applied? Actions
Bug #6981: dpdk: compiler warnings Actions
Bug #7019: snmp: probing parser returns ALPROTO_FAILED instead of ALPROTO_UNKNOWN if slice.len() < 4 Actions
Bug #7254: dcerpc: parser does not support multiple PDUs Actions
Bug #7285: Websocket compression mishandling Actions
Bug #7420: detect-engine: warning fgets could get negative value Actions
Bug #7441: config/port: Misleading message when port string is too long Actions
Bug #7442: telnet: frame parser inaccuracies Actions
Bug #7462: suricata-verify: pass when compiled with FUZZING_UNSAFE Actions
Bug #7479: segfault using dummy config output.eve-log.types.alert.payload-buffer-size = 0 Actions
Bug #7546: dcerpc: parser does not take fraglen into account Actions
Bug #7547: dcerpc: parser uses only one header for both directions Actions
Bug #7568: pcap: continuous file reading fails on an empty directory Actions
Feature #3952: mDNS protocol implementation Actions
Feature #4226: bsize: apply as depth to patterns Actions
Feature #4566: pgsql: add subprotocol-states Actions
Feature #5203: dpdk: implement primary app for Suricata secondary mode Actions
Feature #5286: ips: allow dropping of packet/flow when alert queue exceeded Actions
Feature #6210: outputs: add verdict event type Actions
Feature #6422: dpdk: expand on DPDK allocation hints Actions
Feature #7566: dcerpc: applayer events for anomalous parsing results Actions
Feature #7587: mime: add email.body_md5 keyword Actions
Feature #7593: mime: add email.message_id keyword Actions
Feature #7597: mime: add email.url keyword Actions
Feature #7599: mime: add email.received keyword Actions
Feature #7600: mime: add rule keywords Actions
Optimization #5180: detect/alert: make sure that signatures with `drop` action are respected, even if the alert is discarded Actions
Optimization #6704: CI: expand check for pcapng; also check `-nanosecond` Actions
Optimization #7251: dcerpc: mimic gap behavior if invalid data is sent to protocol parser Actions
Optimization #7292: CI: clang-format rechecks every main-7.0.x commit Actions
Task #3334: rust: cleanup registration of C function pointers in SuricataContext Actions
Task #4799: af-packet: review iface up/down logic Actions
Task #5256: rust: see if we can reduce number of crate deps Actions
Task #5472: tracking: upgrading from 7 to 8 Actions
Task #6576: pgsql: log identifier for unknown messages? Actions
Task #7461: suricata-verify: pass all tests Actions
Task #7591: mime: add email.date keyword Actions
Task #7594: mime: add email.status keyword Actions
Task #7598: mime: add email.x_mailer Actions
Task #7627: events/rules: prevent ruleset loading blocks from name fixes Actions
Task #7632: suricata-lua-sys: tag with a non-prelese version Actions
Documentation #2620: userguide: document tagged_packets / event_type packet Actions
Documentation #4350: Devguide: transaction handling logic Actions
Documentation #4351: doc: explain the AppLayerParserTriggerRawStreamReassembly logic Actions
Documentation #4352: Devguide: Debugging Basics - pcap_cnt Actions
Documentation #4658: Add/improve documentation for pcre substring capture logging Actions
Documentation #4705: userguide: add sections about frame support Actions
Documentation #4708: devguide: Add Eve Output Plugins Actions
Documentation #4709: userguide: Add page about analyzing Suricata performance Actions
Documentation #4980: doc/frames: document frame rule keyword Actions
Documentation #5008: userguide: add a protocol chart listing defaults Actions
Documentation #5078: suricata config reload: improve documentation on behavior Actions
Documentation #5138: userguide: add a section for fileinfo eve type Actions
Documentation #5139: userguide: add a section for netflow event type Actions
Documentation #5274: devguide: document how the alert flow works Actions
Documentation #5449: userguide: document how suricata processes rules internally Actions
Documentation #5513: userguide: add a chapter for IPS mode Actions
Documentation #5531: userguide: ensure documentation is up to date Actions
Documentation #5532: userguide: have a section to mention and document the various ways stream-depth can be set Actions
Documentation #5534: userguide: better document what TCP midstreams are for Suricata Actions
Documentation #5543: userguide: document which keywords accept the prefilter keyword Actions
Documentation #5554: userguide: document behavior for actions like PASS, DROP, REJECT, BYPASS... Actions
Documentation #5575: docs: bring 'reporting bugs page' into userguide and update it Actions
Documentation #5612: devguide: add a chapter about Suricata's exception policies Actions
Documentation #5690: userguide: document the differences between IPS and IDS mode Actions
Documentation #5829: userguide: add context on "why/when an exception policy is applied" Actions
Documentation #5830: userguide: update & improve exception policy section Actions
Documentation #5869: userguide: describe what are the delta stats counters Actions
Documentation #5891: userguide: explain different log save directory in offline mode Actions
Documentation #5897: devguide: add section on generating code coverage reports locally Actions
Documentation #5910: devguide: explain possible differences in data inspection with inline stream or not Actions
Documentation #5911: userguide: update & bring guide for installation on Windows to RtD Actions
Documentation #6022: devguide: explain how the engine identifies applayer protocols Actions
Documentation #6026: userguide/suricata-yaml: update image on threading Actions
Documentation #6030: devguide: expand Suricata Internals chapter Actions
Documentation #6058: doc/configuration: clarify sig_id & gid_id for global threshold Actions
Documentation #6069: userguide/install: move RPM distros to their own page Actions
Documentation #6078: eve/schema: document pgsql Actions
Documentation #6096: eve/app-layer: generate example eve-log for each protocol Actions
Documentation #6180: userguide: add troubleshooting section Actions
Documentation #6219: userguide: add page about different usecases Actions
Documentation #6252: userguide/install: move Ubuntu distros to their own page Actions
Documentation #6270: userguide: document usage of Suricata as a firewall Actions
Documentation #6284: userguide: document what's the impact of `stream.inline` Actions
Documentation #6369: stream: document stream.3whs_syn_flood and stream.3whs_synack_flood Actions
Documentation #6412: devguide: API upgrade notes Actions
Documentation #6434: eve/schema: document stats Actions
Documentation #6442: rtd: indicate that a page is for an outdated version Actions
Documentation #6450: userguide: add section about sshhash Actions
Documentation #6451: userguide: update 'what is suricata' section Actions
Documentation #6452: userguide/ftp: clarify usage around ftp and ftp.data keyword Actions
Documentation #6484: userguide: add keyword performance results Actions
Documentation #6486: userguide: explain pkt_on_wrong_thread counter Actions
Documentation #6495: userguide: add section on SMTP event type Actions
Documentation #6498: userguide/output: add section about fileinfo Actions
Documentation #6548: http.stat_msg - note about HTTP/2 behavior Actions
Documentation #6566: userguide: add description for missing EVE krb fields Actions
Documentation #6626: devguide: add instructions for MacOS setup Actions
Documentation #6840: devguide/app-layer: section with conceptualized steps for adding parser Actions
Documentation #6955: devguide: update coding-style docs Actions
Documentation #7078: devguide: document current ffi naming style Actions
Documentation #7081: userguide: add unix socket option to retrieve flow info Actions
Documentation #7277: doc/actions: clarify 'pass' scope variations Actions
Documentation #7329: doc: explain the priority ports setting Actions
Documentation #7348: userguide: explain SYSTEM and USER mode Actions
Documentation #7424: devguide: document pseudo packets Actions
Documentation #7580: userguide: add section for negated content Actions
Documentation #7631: userguide: document lua lib suricata.dnp3 Actions

Also available in: TXT