Project

General

Profile

8.0.0-rc1

open

Due in 32 days (06/10/2025)

12%

239 issues   (28 closed — 211 open)

Issues by
Bug

8/74
Feature

6/42
Optimization

1/10
Task

11/41
Documentation

2/72
Related issues
Bug #635: output: missing keywords in list-keywords output Actions
Bug #2205: detect: error on content relative to fast_pattern:only Actions
Bug #3182: parsing: warn user on wildcard usage without quotes with -S Actions
Bug #3218: detect: wrong matches with ssl_state Actions
Bug #3236: output: list-keywords does not match on aliases Actions
Bug #3436: suricatasc: crashing using command 'reopen-log-files' Actions
Bug #4135: dns: response only udp not detected as dns Actions
Bug #4220: detect: signature not hit with --simulate-ips option Actions
Bug #4482: detect: detect events not in rules, not tested (and not working?) Actions
Bug #4522: Rules with stream_size greater than not working Actions
Bug #4571: Unable to trigger rule by content in case of IPv4 in IPv4 incapsulation Actions
Bug #4702: SYN/ACK dropped when client does not support tcp timestamps Actions
Bug #4786: xbits: no error on invalid 'expire' values Actions
Bug #4815: unix socket: ftp memcap missing from socket commands Actions
Bug #4898: detect: Ensure detection events are logged Actions
Bug #5031: flowbits - no error on invalid options Actions
Bug #5037: invalid timestamp in ending events Actions
Bug #5076: keyword content does not work over reassembled TCP Actions
Bug #5177: detect/engine-analyzer: rule analyzer warns about http buffers usage/replacement even when using new keyword Actions
Bug #5576: Dataset is setting data despite the signature being a complete match Actions
Bug #5689: community id computed wrong for tcp and ipv4 when src_ip == dest_ip Actions
Bug #5739: htp: handle alloc failure for user data Actions
Bug #6186: Integer overflows 64 to 32 bytes Actions
Bug #6370: plugins: install libsuricata-config by default, or with headers Actions
Bug #6384: rust: configure fails to persistently detect/remember cbindgen location Actions
Bug #6400: log of DNS answer is in wrong direction Actions
Bug #6418: detect/engine-analyzer: rule parser error uses outdated buffer Actions
Bug #6499: tcp.active_sessions and flow.active count will never reduce when using trex Actions
Bug #6663: Config rules does not disable logging. Actions
Bug #6743: stream/tcp: spurious retransmission seen as invalid Actions
Bug #6744: tcp: fast open packet not fully handled Actions
Bug #6776: exception/policy: bypass flow incorrect applied? Actions
Bug #6865: BUG_ON triggered from AdjustToAcked Actions
Bug #6976: flow/action: not updated w pkt + flow:stateless rules Actions
Bug #6981: dpdk: compiler warnings about lossy integer precision Actions
Bug #7004: app-layer: wrong tx may be logged for stream rules Actions
Bug #7019: snmp: probing parser returns ALPROTO_FAILED instead of ALPROTO_UNKNOWN if slice.len() < 4 Actions
Bug #7216: drop_reason counters don't support tunneled connections Actions
Bug #7236: plugins: custom transaction loggers cannot be registered by a plugin Actions
Bug #7254: dcerpc: parser does not support multiple PDUs Actions
Bug #7285: Websocket compression mishandling Actions
Bug #7360: BUG_ON triggered from GetLeftEdge Actions
Bug #7374: dpdk: iface-copy should not be mandatory Actions
Bug #7376: dpdk: delayed detect won't fully start Suricata until the first traffic Actions
Bug #7378: dpdk: having too few hugepages can lead to segfault on startup Actions
Bug #7390: byte_extract: issue with saved 'name' in distance keyword Actions
Bug #7420: detect-engine: warning fgets could get negative value Actions
Bug #7441: config/port: Misleading message when port string is too long Actions
Bug #7442: telnet: frame parser inaccuracies Actions
Bug #7462: suricata-verify: pass when compiled with FUZZING_UNSAFE Actions
Bug #7479: segfault using dummy config output.eve-log.types.alert.payload-buffer-size = 0 Actions
Bug #7498: rust: cleanup of extern "C" functions and no_mangle Actions
Bug #7546: dcerpc: parser does not take fraglen into account Actions
Bug #7547: dcerpc: parser uses only one header for both directions Actions
Bug #7549: detect: using different sticky buffers for byte_extract and byte_jump leads to undefined value before doing the jump Actions
Bug #7568: pcap: continuous file reading fails on an empty directory Actions
Bug #7579: detect/files: local_file_id not incremented if inspection buffer is NULL Actions
Bug #7634: hyperscan: coverity warnings Actions
Bug #7638: detect: incorrect rule ordering with more complex flowbit chains Actions
Bug #7639: dpdk: update Connect-X4 recommended fallback tx-descriptor count Actions
Bug #7643: excessive mtu messages at start up Actions
Bug #7647: pgsql: empty request logged if password message disabled Actions
Bug #7649: lib: suricata version in sys crate needs to be updated on build Actions
Bug #7653: ips: deconflict pass flow and drop packet rules Actions
Bug #7664: detect: coverity Dereference before null check Actions
Bug #7665: transaction rules: support filesize Actions
Bug #7667: rust: move extern C definitions to suricata_sys and bindgen Actions
Bug #7668: http: lack of setting updated_ts leads to firewall bypass Actions
Bug #7671: lua: suricata-lua-sys needs to honor MSAN oss-fuzz flags Actions
Bug #7681: flow: race condition at shutdown leads to duplicate flows Actions
Bug #7685: tls: Invalid ja4 due to double client hello Actions
Bug #7687: flow: non-TCP protocol timeout handling leads to missing flows Actions
Bug #7689: Dataset of type IP can't set IPv4 Actions
Bug #7694: flow: elephant flow counts previous bytes revisiting an index Actions
Feature #2290: lua: use script as transform Actions
Feature #2448: dns: additional buffers for DNS Responses Actions
Feature #3952: protocols: implement mDNS Actions
Feature #4099: app-layer: allow direct rule keyword registration Actions
Feature #4136: configure: use Suricata-Update managed classification.config Actions
Feature #4226: bsize: apply as depth to patterns Actions
Feature #4566: pgsql: add subprotocol-states Actions
Feature #4660: base64_decode cannot be used with Transformations like pcrexform Actions
Feature #4876: Additional FTP Buffers Actions
Feature #5203: dpdk: implement primary app for Suricata secondary mode Actions
Feature #5217: ips: allow dropping of flow if applayer specific memcap is hit Actions
Feature #5286: ips: allow dropping of packet/flow when alert queue exceeded Actions
Feature #5642: DNS: parity between log fields and detection Actions
Feature #5692: http: brotli content encoding for HTTP/1.1 Actions
Feature #6259: pgsql: add `query` detection keyword Actions
Feature #6368: stream/midstream: wscale setting Actions
Feature #6422: dpdk: expand on DPDK allocation hints Actions
Feature #6695: tls: log extensions Actions
Feature #6805: cpu-affinity: enhance CPU affinity logic with per-interface NUMA preferences Actions
Feature #6927: dpdk: add unit tests for threading and mempool cache size functions Actions
Feature #6936: landlock: enable by default Actions
Feature #7036: DPDK NUMA setup: choose correct CPUs from worker-cpu-set Actions
Feature #7047: eve: add ip version field Actions
Feature #7117: dpdk: hardware timestamping for packets Actions
Feature #7351: transform/from_base64: Support "relative" offsets Actions
Feature #7438: detect: add flow.rate keyword Actions
Feature #7504: rules: ftp.dynamic_port keyword Actions
Feature #7505: rules: ftp.mode keyword Actions
Feature #7506: rules: ftp.reply_received keyword Actions
Feature #7507: rules: ftp.completion_code keyword Actions
Feature #7519: dpdk: verify the driver is DPDK-compatible on Intel cards Actions
Feature #7566: dcerpc: applayer events for anomalous parsing results Actions
Feature #7586: mime: expose 'headers' as a keyword Actions
Feature #7587: mime: add email.body_md5 keyword Actions
Feature #7593: mime: add email.message_id keyword Actions
Feature #7597: mime: add email.url keyword Actions
Feature #7599: mime: add email.received keyword Actions
Feature #7600: mime: add rule keywords Actions
Feature #7635: eve: include transaction count Actions
Feature #7645: pgsql: add CopyIn subprotocol/mode Actions
Feature #7646: pgsql: add CopyBoth subprotocol/mode Actions
Feature #7683: mime: add email.attachment keyword Actions
Optimization #4753: lua: fix inconsistency in the init "needs" key Actions
Optimization #5180: detect/alert: make sure that signatures with `drop` action are respected, even if the alert is discarded Actions
Optimization #6502: schema: avoid - and . in keys Actions
Optimization #6704: CI: expand check for pcapng; also check `-nanosecond` Actions
Optimization #7026: app-protos: trigger raw stream reassembly Actions
Optimization #7251: dcerpc: mimic gap behavior if invalid data is sent to protocol parser Actions
Optimization #7292: CI: clang-format rechecks every main-7.0.x commit Actions
Optimization #7353: files: remove deprecated force-md5 config option Actions
Optimization #7529: detect/dns: move wrapper code from C to rust Actions
Optimization #7650: pgsql: clean up logging Actions
Task #2693: tracking: libsuricata Actions
Task #3153: tracking: scan-build warnings Actions
Task #3334: rust: cleanup registration of C function pointers in SuricataContext Actions
Task #3343: tracking: developer documentation Actions
Task #3695: research: libhwloc for better autoconfiguration Actions
Task #4082: ftp: convert parser to Rust Actions
Task #4429: libsuricata: Use cases with examples Actions
Task #4799: af-packet: review iface up/down logic Actions
Task #5256: rust: see if we can reduce number of crate deps Actions
Task #5472: tracking: upgrading from 7 to 8 Actions
Task #5827: [investigate] output/drop: make `drop reason` more informative Actions
Task #5840: dpdk: Design test cases for DPDK capture interface Actions
Task #6382: Add DPDK 23.11 build to Github Actions Actions
Task #6476: ftp: parity of logging and detection buffers Actions
Task #6573: rust: set new minimum Rust version for Suricata 8 Actions
Task #6576: pgsql: log identifier for unknown messages? Actions
Task #6814: libsuricata: opt-in signal handling Actions
Task #6819: tracking: rust: update dependencies for 8 Actions
Task #6929: eve/stats: make stats API aware of meaningful zero-values Actions
Task #6941: lua: review and document lua rule return types Actions
Task #7079: rust: unify rust ffi style Actions
Task #7452: ldap: add keywords to match output Actions
Task #7461: suricata-verify: pass all tests Actions
Task #7486: lua: turn flowvars into lib Actions
Task #7487: lua: turn flowints into lib Actions
Task #7490: lua: turn rule into lua lib Actions
Task #7491: lua: turn file into lua lib Actions
Task #7578: engine/analysis: add info on filestore Actions
Task #7589: eve: deprecate syslog filetype for eve Actions
Task #7591: mime: add email.date keyword Actions
Task #7598: mime: add email.x_mailer Actions
Task #7603: lua: turn hassh into lib Actions
Task #7605: lua: turn ja3 into lib Actions
Task #7606: lua: turn smtp into lib Actions
Task #7607: lua: turn ssh into lib Actions
Task #7608: lua: turn tls into lib Actions
Task #7609: lua: suricata.util lib Actions
Task #7627: events/rules: prevent ruleset loading blocks from name fixes Actions
Task #7632: suricata-lua-sys: tag with a non-prelese version Actions
Task #7656: fast.lua: update script to reflect library use Actions
Task #7673: libsuricata: rate_filter callback Actions
Documentation #2620: userguide: document tagged_packets / event_type packet Actions
Documentation #4350: doc/devguide: transaction handling logic Actions
Documentation #4351: doc: explain the engine logic to trigger reassembly of TCP data Actions
Documentation #4352: Devguide: Debugging Basics - pcap_cnt Actions
Documentation #4658: Add/improve documentation for pcre substring capture logging Actions
Documentation #4705: userguide: add sections about frame support Actions
Documentation #4708: devguide: Add Eve Output Plugins Actions
Documentation #4709: userguide: Add page about analyzing Suricata performance Actions
Documentation #4980: doc/frames: document frame rule keyword Actions
Documentation #5008: userguide: add a protocol chart listing defaults Actions
Documentation #5078: suricata config reload: improve documentation on behavior Actions
Documentation #5138: userguide: add a section for fileinfo eve type Actions
Documentation #5139: userguide: add a section for netflow event type Actions
Documentation #5274: devguide: document how the alert flow works Actions
Documentation #5449: userguide: document how suricata processes rules internally Actions
Documentation #5465: doc/userguide: document terminating behavior of rule actions Actions
Documentation #5485: userguide: explain that the http.header_names buffer is normalized Actions
Documentation #5513: userguide: add a chapter for IPS mode Actions
Documentation #5531: userguide: ensure documentation is up to date Actions
Documentation #5532: userguide: have a section to mention and document the various ways stream-depth can be set Actions
Documentation #5534: userguide: better document what TCP midstreams are for Suricata Actions
Documentation #5543: userguide: document which keywords accept the prefilter keyword Actions
Documentation #5554: userguide: document behavior for actions like PASS, DROP, REJECT, BYPASS... Actions
Documentation #5575: docs: bring 'reporting bugs page' into userguide and update it Actions
Documentation #5612: devguide: add a chapter about Suricata's exception policies Actions
Documentation #5690: userguide: document the differences between IPS and IDS mode Actions
Documentation #5829: userguide: add context on "why/when an exception policy is applied" Actions
Documentation #5830: userguide: update & improve exception policy section Actions
Documentation #5869: userguide: describe what are the delta stats counters Actions
Documentation #5891: userguide: explain different log save directory in offline mode Actions
Documentation #5897: devguide: add section on generating code coverage reports locally Actions
Documentation #5910: devguide: explain possible differences in data inspection with inline stream or not Actions
Documentation #5911: userguide: update & bring guide for installation on Windows to RtD Actions
Documentation #6022: devguide: explain how the engine identifies applayer protocols Actions
Documentation #6026: userguide/suricata-yaml: update image on threading Actions
Documentation #6030: devguide: expand Suricata Internals chapter Actions
Documentation #6058: doc/configuration: clarify sig_id & gid_id for global threshold Actions
Documentation #6069: userguide/install: move RPM distros to their own page Actions
Documentation #6078: eve/schema: document pgsql Actions
Documentation #6096: eve/app-layer: generate example eve-log for each protocol Actions
Documentation #6180: userguide: add troubleshooting section Actions
Documentation #6219: userguide: add page about different usecases Actions
Documentation #6252: userguide/install: move Ubuntu distros to their own page Actions
Documentation #6270: userguide: document usage of Suricata as a firewall Actions
Documentation #6284: userguide: document what's the impact of `stream.inline` Actions
Documentation #6369: stream: document stream.3whs_syn_flood and stream.3whs_synack_flood Actions
Documentation #6412: devguide: API upgrade notes Actions
Documentation #6434: eve/schema: document stats Actions
Documentation #6442: rtd: indicate that a page is for an outdated version Actions
Documentation #6450: userguide: add section about sshhash Actions
Documentation #6451: userguide: update 'what is suricata' section Actions
Documentation #6452: userguide/ftp: clarify usage around ftp and ftp.data keyword Actions
Documentation #6484: userguide: add keyword performance results Actions
Documentation #6486: userguide: explain pkt_on_wrong_thread counter Actions
Documentation #6492: doc: explain how FTP works Actions
Documentation #6495: userguide: add section on SMTP event type Actions
Documentation #6498: userguide/output: add section about fileinfo Actions
Documentation #6566: userguide: add description for missing EVE krb fields Actions
Documentation #6626: devguide: add instructions for MacOS setup Actions
Documentation #6840: devguide/app-layer: section with conceptualized steps for adding parser Actions
Documentation #6955: devguide: update coding-style docs Actions
Documentation #7078: devguide: document current ffi naming style Actions
Documentation #7081: userguide: add unix socket option to retrieve flow info Actions
Documentation #7143: doc: legacy keyword http_host used in examples Actions
Documentation #7277: doc/actions: clarify 'pass' scope variations Actions
Documentation #7329: doc: explain the priority ports setting Actions
Documentation #7348: userguide: explain SYSTEM and USER mode Actions
Documentation #7424: devguide: document pseudo packets Actions
Documentation #7580: userguide: add section for negated content Actions
Documentation #7631: userguide: document lua lib suricata.dnp3 Actions
Documentation #7662: userguide: add section for rule hooks Actions
Documentation #7680: xbits: documentation required for tx scoped xbits Actions

Also available in: TXT