ct0br0

Been having issues with notifications. Just saw this, will re-run as it hasn't changed and that pipe is old.

Our current version and the latest version of this SID are the same. Parsing issue must be on our side.

You can ignore the QA failures. Didn't properly rebase the alert counts. Don't use lua for those tests so should be a non-issue.

Last QA msg is from testing new wording. Catching on the panic.

Extracting a pcap with ports 135, 139 and 445 from TLPR1 is around 415MB and has 4140 `.app_layer.error.dcerpc_tcp.parser` but splitting by IP only has 13 from 192.168.0.1 which isn't what...

I'm not sure that we can. Looks like you need iptables and from past experience since we only have the half trex setup I'm not sure that will work properly...

Testing the auto-libhtp-PR pickup with this. Run should be done this afternoon ~4hr

Sorry, meant to delete. Was testing the PR runner script and everything had already ran.