[Oisf-users] Last ET update broken on Hyperscan

Sascha Steinbiss satta at debian.org
Wed Jul 19 08:34:46 UTC 2017


Hi all,

> Quick heads up: yesterdays ET update breaks on Hyperscan. Not sure which
> rule, or if it's Open or Pro only.

I've done some quick narrowing down using 'suricata -S' and the ET daily
changelog
(https://www.proofpoint.com/us/daily-ruleset-update-summary-20170718).
Result: For me commenting out the rule with SID 2827194 in
etpro-mobile_malware.rules fixed the issue.

Cheers
Sascha



More information about the Oisf-users mailing list