Jason Ish

app-layer: don't wrap around on port 65535

4

A port value of 65535 caused the port value to wrap-around to 0 resulting in an infinite loop. Introduced with commit 53fc70a9a73cd157ed8235f6a73a8752f8f1396a.

rust: pin serde to 1.0.142 - v1

1

Pin serde to 1.0.142 for now as 1.0.143 fails to build on Rust 1.48. We don't depend on this directly, but instead via sawp-modbus.

python: remove use of distutils - v4

4

Don't use distutils to install Python code, instead just use make. Distutils is being deprecated and setuptools insists on working within the scope of the system and not within our...

Issue 5259 - x509 time dependency update - v1

7

I dug a commit out of @chifflier 's repo then udpated `x509-parser` to `0.13.0`. The code changes on our side seem minimal, however, SV `bug-1450-02` now fails, and I'm not...

(draft) - rust configuration library - v8

10

Create a PR just for preview, and trigger QA. This replaces libyaml with a Rust module using rust-yaml to load the yaml. While the rust-yaml scanner is used for the...

Test and if it fails, allow username and password of the datastore to be provided as command line environments. This would allow EveBox to work with secret stores like Hashicorp...

It could be interesting to support the Security Onion Elasticsearch schema. This is probably only useful if SO is setup to use Suricata for metadata as well.

During the Rust rewrite, user-agent parsing was lost.

Due to an issue in dependency libraries, EveBox cannot connect to an Elasticsearch server using TLS by IP address. It must use a hostname. While untested, this probably applied to...

Integration with Virus Total

1

Link, or using the REST API...