Download Suricata 4.0.3

Version 4.0.3 of Suricata has been released, as a successor to version 4.0.1. Suricata is an open source network intrusion detection system (IDS), intrusion prevention system (IPS), and network security monitoring engine. It can be used to monitor network traffic and alert a system administrator if anything suspicious is detected. The Open Information Security Foundation is coordinating the development, with help from the community and various manufacturers. The with it on json Based logging system Eve collected data can be done with, among other things, log stash are used to display information graphically again at to give. In version 4.0, the detection capabilities have been improved, there are additional options for displaying the data and more protocols are supported. The following improvements have also been made in this update:

Suricata 4.0.3 available!
We are pleased to announce Suricata 4.0.3. This is regular bug fix release fixing various issues. Note: this release was first released as 4.0.2, but due to a packaging mistake it contained the wrong branch.

changes

• Feature #2245: decoder for ieee802.1AH traffic
• Bug #798: stats.log in yaml config – append option – missing
• Bug #891: detect-engine.profile does not err out in incorrect values ​​– suricata.yaml
• Bug #961: max pending packets variable parsing
• Bug #1185: napatech: cppcheck warning
• Bug #2215: Lost events writing to unix socket
• Bug #2230: valgrind memcheck – 4.0.0-dev (rev 1180687)
• Bug #2250: detect: mixing byte_extract and isdataat leads to FP & FN
• Bug #2263: content matches disregarded when using dns_query on udp traffic
• Bug #2274: ParseSizeString in util-misc.c: Null-pointer dereference
• Bug #2275: ConfGetInt in conf.c: NULL pointer dereference
• Bug #2276: conf: NULL pointer dereference in CoredumpLoadConfig
• Bug #2293: rules: depth < content rules not rejected
• Bug #2324: segfault in http_start (4.0.x)
• Bug #2325: Suricata segfaults on ICMP and flowint check (4.0.x)

Logstash Kibana fed with information from Suricata with json output.