jasonish/py-idstools issues and pull requests

#98 - Invalid issue

Issue - State: closed - Opened by Koen1999 4 months ago

#97 - Wrong parsing of pcre and possibly others

Issue - State: open - Opened by vpiserchia 9 months ago

#96 - Staging for 0.6.5.

Pull Request - State: closed - Opened by jasonish 11 months ago

#95 - New release to support python 3.13

Issue - State: open - Opened by marcindulak 11 months ago - 6 comments

#94 - Suggestion: Add check in rulecat.py if sid is None as otherwise script aborts

Pull Request - State: open - Opened by security-companion over 1 year ago

#92 - memory usage increase issue

Issue - State: open - Opened by ganduulgag over 2 years ago - 3 comments

#91 - allow output/repack if path is a directory too

Pull Request - State: closed - Opened by petiepooo over 2 years ago - 1 comment

#90 - Rule parsing fails if last option doesn't close with semi-colon

Issue - State: open - Opened by KimiNewt over 2 years ago - 1 comment

#89 - Tests fail with python 3.11

Issue - State: closed - Opened by marcindulak almost 3 years ago - 1 comment

#88 - Allow config action to be used in local rules

Pull Request - State: closed - Opened by weslambert over 3 years ago - 1 comment

#87 - rules: insert header elements into Rule object

Pull Request - State: closed - Opened by szymonnogiec over 3 years ago - 1 comment

#86 - eve2pcap: fix handling of IPv6 addresses

Pull Request - State: closed - Opened by johnrbrown over 3 years ago - 1 comment

#85 - u2json event.appid output is in byte format and mangled

Issue - State: open - Opened by csbflyer over 3 years ago

#84 - Unified2 Event Types mpls, vlan, and appid not included in u2eve output

Issue - State: open - Opened by csbflyer over 3 years ago
Labels: help wanted

#83 - Provide option for idstools-u2eve to reload sid-msg.map after updating sid-msg.map contents.

Issue - State: open - Opened by csbflyer over 3 years ago - 1 comment
Labels: help wanted

#82 - Add .md5 extension after URL filepath but before parameters

Pull Request - State: closed - Opened by petiepooo over 3 years ago

#81 - Add .md5 extension between URL's filename and its parameters

Issue - State: closed - Opened by petiepooo over 3 years ago - 1 comment

#80 - Feature request: mutate metadata key value pairs

Issue - State: open - Opened by nokje almost 4 years ago

#79 - Coverting packets object to pcap file

Issue - State: closed - Opened by DDB-en almost 4 years ago - 7 comments

#78 - Connection with suricata-update

Issue - State: closed - Opened by vpiserchia about 4 years ago - 2 comments
Labels: question

#77 - python2-scapy as pkg dependency

Issue - State: open - Opened by cherdt over 4 years ago

#76 - eve2pcap.py fails with IPv6 addresses

Issue - State: closed - Opened by cherdt over 4 years ago - 1 comment

#75 - SoolRecordReader stop working

Issue - State: open - Opened by someone77 over 5 years ago - 2 comments

#74 - Added support for new event type (v3)

Pull Request - State: closed - Opened by ArthanJans over 5 years ago - 4 comments

#73 - Feature Request: ability to parse the source, destination, protocol using dictionary.

Issue - State: open - Opened by ancoleman over 5 years ago

#72 - Recent versions of Snort unified2 not supported.

Issue - State: closed - Opened by deepakrana47 over 5 years ago - 5 comments

#71 - Bug: Multiple instances of rule options fields clobber eachother

Issue - State: open - Opened by andrewbolster almost 6 years ago - 4 comments

#70 - New functions for retrieving and changing rule values

Pull Request - State: open - Opened by Syoc almost 6 years ago

#69 - Add basic support for xbits and flowints

Pull Request - State: open - Opened by sevdog about 6 years ago

#68 - appStats u2 can't work

Issue - State: open - Opened by AAyyy over 6 years ago - 1 comment

#67 - cannot parse rule

Issue - State: closed - Opened by sonicold over 6 years ago - 2 comments

#66 - Error eve2pcap not work

Issue - State: open - Opened by Canon88 over 6 years ago - 8 comments

#65 - support for spaces in list of hosts

Issue - State: closed - Opened by 0xmilkmix over 6 years ago - 2 comments

#64 - Error when parsing Unicode in URL

Issue - State: open - Opened by Straevaras almost 7 years ago

#63 - Feature request: add flowint parsing

Issue - State: open - Opened by sevdog almost 7 years ago

#62 - Feature request: xbits parsing support

Issue - State: open - Opened by sevdog almost 7 years ago

#61 - setup.py not reflecting the contents of bin

Issue - State: closed - Opened by marcindulak almost 7 years ago - 1 comment

#60 - Missing tag or release for 0.6.2

Issue - State: closed - Opened by sevdog almost 7 years ago - 1 comment

#59 - Do you have idstools with Multi-thread?

Issue - State: closed - Opened by q1f3 almost 7 years ago - 1 comment

#58 - Parsing a badly-formatted rule ends in seg fault

Issue - State: closed - Opened by imbellish about 7 years ago - 1 comment

#57 - Bug: parse multiple metadata tags

Issue - State: closed - Opened by sevdog about 7 years ago - 1 comment

#56 - rulecat: Tweak log levels.

Issue - State: closed - Opened by jasonish over 7 years ago - 1 comment
Labels: rulecat

#55 - rulecat: Don't display "oinkcode" in log output.

Issue - State: open - Opened by jasonish over 7 years ago
Labels: rulecat

#54 - issue with u2eve

Issue - State: closed - Opened by kernelschmelze over 7 years ago - 14 comments

#53 - Issues with rulecat.py and Python3

Issue - State: closed - Opened by marcindulak over 7 years ago - 4 comments
Labels: bug, python3

#52 - Feature request: snort.org support in rulecat

Issue - State: closed - Opened by sevdog over 7 years ago - 4 comments

#51 - Rules where msg contains ":" don't appear correctly

Issue - State: closed - Opened by DigiAngel over 7 years ago - 10 comments

#50 - Bug: semicolon in rule message

Issue - State: closed - Opened by sevdog over 7 years ago - 2 comments

#49 - Improvement: rulecat report only if needed

Issue - State: closed - Opened by sevdog over 7 years ago - 1 comment

#48 - Two writers, one file?

Issue - State: closed - Opened by DigiAngel over 7 years ago - 2 comments

#47 - u2eve: include unified2's extra data in eve event

Issue - State: closed - Opened by jasonish over 7 years ago - 1 comment
Labels: enhancement

#46 - u2eve: add --packet-hex option

Issue - State: closed - Opened by jasonish over 7 years ago - 1 comment
Labels: enhancement

#45 - u2spewfoo.py KeyError

Issue - State: closed - Opened by DigiAngel over 7 years ago - 3 comments

#44 - FeatureRequest: Unified to Elasticsearch

Issue - State: closed - Opened by DigiAngel over 7 years ago - 19 comments
Labels: question

#43 - rule: add parser for msg metadata

Pull Request - State: closed - Opened by sevdog over 7 years ago - 3 comments

#42 - Feature request: extract ruleset when parsing

Issue - State: open - Opened by sevdog over 7 years ago - 1 comment

#41 - Feature request: extract rule group from msg when parsing

Issue - State: closed - Opened by sevdog over 7 years ago - 4 comments

#40 - idstools-rulecat: crash on Python 3.

Issue - State: closed - Opened by jasonish over 7 years ago - 1 comment
Labels: bug

#39 - SpoolEventReader packet data

Issue - State: closed - Opened by annuskeras over 7 years ago - 6 comments

#38 - Feature Request: Suricata version override for rulecat?

Issue - State: closed - Opened by valorcz over 7 years ago - 3 comments
Labels: enhancement

#37 - eve2pcap.py: problem parsing timezone

Issue - State: closed - Opened by marcindulak over 7 years ago - 1 comment

#36 - python3: problem with encoding argument in u2eve json.dumps

Issue - State: closed - Opened by marcindulak almost 8 years ago - 2 comments

#35 - add an option for idstools-u2json to print dictionary sorted by key

Pull Request - State: closed - Opened by marcindulak almost 8 years ago - 2 comments

#34 - bin/idstools-u2bench refers to a non-existing module

Issue - State: closed - Opened by marcindulak almost 8 years ago - 1 comment

#33 - rpmlint reports scripts are packaged under python modules directories

Issue - State: closed - Opened by marcindulak almost 8 years ago - 3 comments

#32 - Please add an explicit LICENSE file to the project

Issue - State: closed - Opened by marcindulak almost 8 years ago - 4 comments

#31 - in unified2.py: sport-itype and dport-icode should be four separate fields, not two

Issue - State: closed - Opened by NDietrich almost 8 years ago - 1 comment

#30 - IP6 V2 Event does not unpack properly

Issue - State: closed - Opened by aaron-kahn almost 8 years ago - 1 comment
Labels: duplicate

#29 - IPV6 error

Issue - State: closed - Opened by DDB-en almost 8 years ago - 1 comment

#28 - Feature Request: appid u2 support

Issue - State: closed - Opened by DigiAngel about 8 years ago - 5 comments

#27 - Question: Will this dump direct to ElasticSearch?

Issue - State: closed - Opened by DigiAngel about 8 years ago - 2 comments

#26 - [Feature Request] Request for DROP handling

Issue - State: closed - Opened by samiux about 8 years ago - 1 comment

#25 - unified2 extra data invalid field amount

Issue - State: closed - Opened by TheShankapotomus about 8 years ago - 2 comments

#24 - Changing to https for emergingthreats pro URL

Pull Request - State: closed - Opened by banjoey over 8 years ago - 1 comment

#23 - Unclear on rulecat enable/disable order.

Issue - State: closed - Opened by banjoey over 8 years ago - 6 comments

#22 - idstools-rulecat error with current etpro ruleset.

Issue - State: closed - Opened by banjoey over 8 years ago - 6 comments

#21 - I get EOFError when I read logs

Issue - State: closed - Opened by moimran over 8 years ago - 7 comments

#20 - Fix decoding of IPv6 addresses on python3

Pull Request - State: closed - Opened by elnappo almost 9 years ago - 3 comments

#19 - Encoding issue crash

Issue - State: closed - Opened by djtecha about 9 years ago - 7 comments

#18 - ImportError: cannot import name packet

Issue - State: closed - Opened by cleesmith over 9 years ago

#17 - Output Issue

Issue - State: closed - Opened by roobixx over 9 years ago - 5 comments

#16 - Documentation idstools.unified2.Event

Issue - State: closed - Opened by nv1t over 9 years ago - 1 comment

#15 - New script - u2eve. A more compatible EVE version of u2json.

Pull Request - State: closed - Opened by jasonish over 9 years ago

GitHub / jasonish/py-idstools issues and pull requests