suricata
suricata copied to clipboard
OISF
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
Link to ticket: https://redmine.openinfosecfoundation.org/issues/ https://redmine.openinfosecfoundation.org/issues/4683 Describe changes: - mqtt: move keywords to pure rust SV_BRANCH=https://github.com/OISF/suricata-verify/pull/1920 https://github.com/OISF/suricata/pull/11316 with more fixing commits @satta could you say if you approve ?
Link to ticket: https://redmine.openinfosecfoundation.org/issues/ Follow up on https://redmine.openinfosecfoundation.org/issues/6423 commit ae72ce77fa9c57b8e462cca1130a7c01cd2d4144 Describe changes: - detect: parse units for integer for every cases (and not just equality) To allow `flow.bytes_toserver:>3MB;` in signature
Link to ticket: https://redmine.openinfosecfoundation.org/issues/ https://redmine.openinfosecfoundation.org/issues/5734 Describe changes: - ssh: add frames support (for clear-text records after banner) - detect: run frames detection on packet disabling app-layer because next packets are...
Link to ticket: https://redmine.openinfosecfoundation.org/issues/ Some preparatory work for https://redmine.openinfosecfoundation.org/issues/2696 Describe changes: - remove some qa/ci deprecated files
Link to ticket: https://redmine.openinfosecfoundation.org/issues/ Preliminary work for https://redmine.openinfosecfoundation.org/issues/5053 Describe changes: - detect: helper function for multibuffer - get ready to use dynamic number of app-layer protos (also work with static...
Link to [redmine](https://redmine.openinfosecfoundation.org/projects/suricata/issues) ticket: https://redmine.openinfosecfoundation.org/issues/6186 Describe changes: - fix `-Wshorten-64-to-32` warnings for some files (c*, f*) Some commits of #9840 #11257 next batch
- **github-ci/builds: don't run if only doc changes** - **github-ci: add non-bundled libhtp build**
Link to ticket: https://redmine.openinfosecfoundation.org/issues/ https://redmine.openinfosecfoundation.org/issues/6728 Describe changes: - add prefilter for decode-event and such Draft because of last commit : which version is better for prefilter ? last commit or...
Don't assume the ntlmssp version field is always present if the flag is set. Instead keep track of the offsets of the data of the various blobs and see if...
Previous PR: https://github.com/OISF/suricata/pull/11283 https://redmine.openinfosecfoundation.org/issues/7011 https://redmine.openinfosecfoundation.org/issues/7017 https://redmine.openinfosecfoundation.org/issues/6281 Changes from last PR: - address comments - log all sections, not just queries in requests - merge in additionals: https://github.com/OISF/suricata/pull/11263 - remove unused...