Eric Leblond

Results 110 comments of Eric Leblond

> It looks like netflow events need a fix. Setting to draft for now. Humm suricata-verify needs an update in fact.

Sorry for the delay, I confirm the issue. Suricata -T is detecting the problem but it is ignored by SLS. ``` suricata -l /tmp -T -S pawpatrules.rules {"timestamp":"2024-11-28T22:38:20.799554+0100","log_level":"Notice","event_type":"engine","engine":{"message":"This is Suricata...

OK, looks like it is a suricata bug :)

Suricata bug opened https://redmine.openinfosecfoundation.org/issues/7419

> Tip > > 1. clang-tidy always works better when you give it a compile_commands.json (AKA compilation database). > 2. cpp-linter works better with source paths and clang-tidy when the...

Bonjour, La configuration de la connectivité LDAP n'est pas disponible depuis l'interface dans Clear NDR Community ou SELKS. Elle reste cependant possible en suivant une approche semblable au ticket pointé...

> In the commit, use > > ``` > Ticket: 7356 > Ticket: 7357 > ``` > > so our tracking can work (and the leaderboard counts them) Done, thanks...

@victorjulien any update on this MR ?

> I think we need to discuss the functionality/expected behavior before the implementation : see https://redmine.openinfosecfoundation.org/issues/7356#note-4 > > ``` > alert http any any -> any any (msg:"ex"; http.uri; content:"/example";...