Topics

1

Intrusion Detection and Prevention / Suricata IPS silently blocking Quickbooks Online invites

« on: April 21, 2022, 07:50:13 pm »

Hi

I have found that Suricata IPS silently inhibits / blocks the load of the captcha that loads when trying to accept a Quickbooks online invite. 

works fine when IPS off (IDS only).

I managed to narrow it down to something in the ET telemetry/emerging-coinminer ruleset.  Everything works fine if I leave that ruleset as alert only (by excluding it from my convert to drop policy). 

Issue exists on 22.1.5-amd64 and at least a couple of other versions but I didnt record those at the time before updating sorry. 

No real complaint here / not asking for a fix, successfully worked around, more just posting for reference in case someone else is facing the same frustration. 

2

General Discussion / Net-SNMP Layer 3 visibility

« on: June 29, 2021, 05:29:40 pm »

Hi folks

I'm trying to find a good explanation for the "Layer 3 visibility" switch in Net-SNMP.  What does this actually do?  I understand network layers, just not sure exactly how this applies here. 

Thanks

3

General Discussion / Using API to perform Major Update / Upgrade

« on: January 07, 2021, 03:34:38 pm »

Hi everyone

I'm struggling to find a way to perform a Major update (e.g. from 19.1 to 19.7) using the API.  Is there anyone who has successfully done this using the API or other programmatic method?

4

General Discussion / Reporting > Health > Quality - how do I interpret "Loss" metric?

« on: May 01, 2019, 07:41:34 pm »

Hi Everyone

I'm on 19.1.6 and all seems good.

looking into quality monitoring due to an issue I have.  I'm having a hard time figuring out what the "Loss" metric means when I am looking at my graph under Reporting > Health > Quality. 

"Delay" makes sense.  I interpret that as delay in ms of traffic.

"Loss" is represented as m as well, e.g. 110m.  what does that actually mean?

thanks

Carrot