{"users":[{"id":2,"username":"vjulien","name":"Victor Julien","avatar_template":"/user_avatar/forum.suricata.io/vjulien/{size}/4_2.png","primary_group_name":"Team","flair_name":"Team","flair_group_id":41,"admin":true,"moderator":true,"trust_level":2},{"id":1335,"username":"Ghislain_Hounmenou","name":"Ghislain Hounmenou","avatar_template":"/user_avatar/forum.suricata.io/ghislain_hounmenou/{size}/1859_2.png","trust_level":1},{"id":2662,"username":"Soner_Tari","name":"Soner Tari","avatar_template":"/user_avatar/forum.suricata.io/soner_tari/{size}/3720_2.png","trust_level":2},{"id":2956,"username":"Morpheus101","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/m/4af34b/{size}.png","trust_level":0},{"id":1,"username":"ish","name":"Jason Ish","avatar_template":"/user_avatar/forum.suricata.io/ish/{size}/8_2.png","primary_group_name":"Team","flair_name":"Team","flair_group_id":41,"admin":true,"moderator":true,"trust_level":4},{"id":2954,"username":"prathimak","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/p/91b2a8/{size}.png","trust_level":0},{"id":281,"username":"jonny5","name":"","avatar_template":"/user_avatar/forum.suricata.io/jonny5/{size}/347_2.png","trust_level":2},{"id":320,"username":"jufajardini","name":"Ju Fajardini","avatar_template":"/user_avatar/forum.suricata.io/jufajardini/{size}/896_2.png","primary_group_name":"Team","flair_name":"Team","flair_group_id":41,"moderator":true,"trust_level":4},{"id":2947,"username":"Jal","name":"Jal","avatar_template":"/user_avatar/forum.suricata.io/jal/{size}/3948_2.png","trust_level":0},{"id":431,"username":"lukashino","name":"Lukas Sismis","avatar_template":"/user_avatar/forum.suricata.io/lukashino/{size}/1150_2.png","primary_group_name":"Team","flair_name":"Team","flair_group_id":41,"trust_level":4},{"id":2143,"username":"liheng562653799","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/l/f19dbf/{size}.png","trust_level":1},{"id":448,"username":"florinsfetea","name":"Florin Sfetea","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/f/9fc29f/{size}.png","trust_level":2},{"id":12,"username":"pevma","name":"Peter Manev","avatar_template":"/user_avatar/forum.suricata.io/pevma/{size}/29_2.png","primary_group_name":"Team","flair_name":"Team","flair_group_id":41,"admin":true,"moderator":true,"trust_level":4},{"id":479,"username":"cthomas","name":"Corey Thomas","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/c/e8c25b/{size}.png","primary_group_name":"Team","flair_name":"Team","flair_group_id":41,"trust_level":4},{"id":2067,"username":"Wilker_Luiz_Gadelha","name":"Wilker Luiz Gadelha Maia","avatar_template":"/user_avatar/forum.suricata.io/wilker_luiz_gadelha/{size}/2974_2.png","trust_level":1},{"id":2789,"username":"M4ST3R0RG","name":"Emerson Guedes ","avatar_template":"/user_avatar/forum.suricata.io/m4st3r0rg/{size}/3846_2.png","trust_level":0},{"id":1009,"username":"Cherish_George","name":"Cherish George","avatar_template":"/user_avatar/forum.suricata.io/cherish_george/{size}/1411_2.png","trust_level":1},{"id":573,"username":"Philippe_Antoine","name":"Philippe Antoine","avatar_template":"/user_avatar/forum.suricata.io/philippe_antoine/{size}/799_2.png","primary_group_name":"Team","flair_name":"Team","flair_group_id":41,"trust_level":4},{"id":2782,"username":"cyberm8","name":"Cyberm8","avatar_template":"/user_avatar/forum.suricata.io/cyberm8/{size}/3840_2.png","trust_level":0},{"id":2698,"username":"Indira","name":"","avatar_template":"/user_avatar/forum.suricata.io/indira/{size}/3754_2.png","trust_level":1},{"id":2746,"username":"zhenjun","name":"zhenjun","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/z/b19c9b/{size}.png","trust_level":1},{"id":6,"username":"sbhardwaj","name":"Shivani","avatar_template":"/user_avatar/forum.suricata.io/sbhardwaj/{size}/10_2.png","primary_group_name":"Team","flair_name":"Team","flair_group_id":41,"trust_level":4},{"id":1010,"username":"Muttanna_Hosur","name":"Muttanna Hosur","avatar_template":"/user_avatar/forum.suricata.io/muttanna_hosur/{size}/1412_2.png","trust_level":1},{"id":2753,"username":"Anthony_Frnog","name":"Anthony","avatar_template":"/user_avatar/forum.suricata.io/anthony_frnog/{size}/3405_2.png","trust_level":0},{"id":2743,"username":"tarun","name":null,"avatar_template":"https://avatars.discourse-cdn.com/v4/letter/t/ce7236/{size}.png","trust_level":1},{"id":2296,"username":"gongziw","name":"gongziw","avatar_template":"/user_avatar/forum.suricata.io/gongziw/{size}/3323_2.png","trust_level":1},{"id":2544,"username":"QianKaiLin","name":"千凯 林","avatar_template":"/user_avatar/forum.suricata.io/qiankailin/{size}/3605_2.png","trust_level":1},{"id":7,"username":"Jeff_Lucovsky","name":"Jeff Lucovsky","avatar_template":"/user_avatar/forum.suricata.io/jeff_lucovsky/{size}/11_2.png","primary_group_name":"Team","flair_name":"Team","flair_group_id":41,"trust_level":4},{"id":2144,"username":"Rick_Gutierrez","name":"Rick Gutierrez","avatar_template":"/user_avatar/forum.suricata.io/rick_gutierrez/{size}/3122_2.png","trust_level":1},{"id":272,"username":"satjuice","name":"john","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/s/3ab097/{size}.png","trust_level":1},{"id":9,"username":"Andreas_Herz","name":"Andreas Herz","avatar_template":"/user_avatar/forum.suricata.io/andreas_herz/{size}/52_2.png","primary_group_name":"Team","flair_name":"Team","flair_group_id":41,"admin":true,"trust_level":4},{"id":2651,"username":"Philippe_Antoine1","name":"Philippe Antoine","avatar_template":"/user_avatar/forum.suricata.io/philippe_antoine1/{size}/3712_2.png","trust_level":0},{"id":2652,"username":"wesley.vanderree","name":"Wesley","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/w/858c86/{size}.png","trust_level":0},{"id":2596,"username":"Sina","name":"Sina","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/s/ba8739/{size}.png","trust_level":0}],"primary_groups":[{"id":41,"name":"Team"}],"flair_groups":[{"id":41,"name":"Team","flair_url":null,"flair_bg_color":"","flair_color":""}],"topic_list":{"can_create_topic":false,"more_topics_url":"/c/developers/8?page=1","per_page":30,"top_tags":[{"id":25,"name":"suricata","slug":"suricata"},{"id":17,"name":"rules","slug":"rules"},{"id":5,"name":"community","slug":"community"},{"id":1,"name":"ips","slug":"ips"},{"id":68,"name":"dpdk","slug":"dpdk"},{"id":66,"name":"bug","slug":"bug"},{"id":15,"name":"windows","slug":"windows"},{"id":69,"name":"lua","slug":"lua"},{"id":29,"name":"pcaps","slug":"pcaps"},{"id":18,"name":"suricata-update","slug":"suricata-update"},{"id":67,"name":"xdp","slug":"xdp"}],"topics":[{"fancy_title":"Github CI status","id":1095,"title":"Github CI status","slug":"github-ci-status","posts_count":8,"reply_count":3,"highest_post_number":11,"image_url":null,"created_at":"2021-02-14T10:22:38.908Z","last_posted_at":"2021-08-24T09:21:25.915Z","bumped":true,"bumped_at":"2021-08-24T09:21:25.915Z","archetype":"regular","unseen":false,"pinned":true,"unpinned":null,"excerpt":"Topic to update everyone on the current CI status.","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":758,"like_count":3,"has_summary":false,"last_poster_username":"vjulien","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":2,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"About the Developers category","id":22,"title":"About the Developers category","slug":"about-the-developers-category","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2020-03-16T15:14:38.280Z","last_posted_at":"2023-02-21T15:07:58.352Z","bumped":true,"bumped_at":"2023-02-21T15:07:58.352Z","archetype":"regular","unseen":false,"pinned":true,"unpinned":null,"excerpt":"Suricata Development related questions and discussion. If you’re looking to extend Suricata, or are interested in helping develop Suricata, join us here.","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":550,"like_count":0,"has_summary":false,"last_poster_username":"Ghislain_Hounmenou","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user_id":2,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":1335,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Update on ICAP integration proposal: Working implementation of SSLproxy (icap branch) &amp; icapsuricata (libsuricata service)","id":6357,"title":"Update on ICAP integration proposal: Working implementation of SSLproxy (icap branch) & icapsuricata (libsuricata service)","slug":"update-on-icap-integration-proposal-working-implementation-of-sslproxy-icap-branch-icapsuricata-libsuricata-service","posts_count":12,"reply_count":8,"highest_post_number":12,"image_url":null,"created_at":"2026-05-31T21:38:06.278Z","last_posted_at":"2026-08-15T19:52:55.287Z","bumped":true,"bumped_at":"2026-08-15T19:52:55.287Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":210,"like_count":2,"has_summary":false,"last_poster_username":"Soner_Tari","category_id":8,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":2662,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":2,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Suricata-update fails on Windows with [Errno 13] Permission denied due to temporary file handle locks","id":6427,"title":"Suricata-update fails on Windows with [Errno 13] Permission denied due to temporary file handle locks","slug":"suricata-update-fails-on-windows-with-errno-13-permission-denied-due-to-temporary-file-handle-locks","posts_count":4,"reply_count":1,"highest_post_number":4,"image_url":null,"created_at":"2026-08-09T17:58:54.406Z","last_posted_at":"2026-08-13T14:14:37.843Z","bumped":true,"bumped_at":"2026-08-13T14:14:37.843Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":50,"like_count":0,"has_summary":false,"last_poster_username":"Morpheus101","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":2956,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Ja4 Fingerprint match against the dataset when ssl proxy is involved ,whereing Ja4 FP is calculated by proxy","id":6421,"title":"Ja4 Fingerprint match against the dataset when ssl proxy is involved ,whereing Ja4 FP is calculated by proxy","slug":"ja4-fingerprint-match-against-the-dataset-when-ssl-proxy-is-involved-whereing-ja4-fp-is-calculated-by-proxy","posts_count":4,"reply_count":1,"highest_post_number":4,"image_url":null,"created_at":"2026-07-29T14:04:45.771Z","last_posted_at":"2026-08-05T08:23:57.747Z","bumped":true,"bumped_at":"2026-08-05T08:23:57.747Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":25,"name":"suricata","slug":"suricata"},{"id":17,"name":"rules","slug":"rules"},{"id":1,"name":"ips","slug":"ips"}],"tags_descriptions":{},"views":71,"like_count":0,"has_summary":false,"last_poster_username":"Soner_Tari","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user_id":2954,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":2662,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Feature Request: Ability to use local fqdns (to get ipv4 and/or ipv6) in address-groups vars","id":5735,"title":"Feature Request: Ability to use local fqdns (to get ipv4 and/or ipv6) in address-groups vars","slug":"feature-request-ability-to-use-local-fqdns-to-get-ipv4-and-or-ipv6-in-address-groups-vars","posts_count":7,"reply_count":6,"highest_post_number":8,"image_url":null,"created_at":"2025-06-02T05:46:05.125Z","last_posted_at":"2026-07-20T13:55:58.805Z","bumped":true,"bumped_at":"2026-07-20T13:55:58.805Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":25,"name":"suricata","slug":"suricata"},{"id":17,"name":"rules","slug":"rules"}],"tags_descriptions":{},"views":127,"like_count":2,"has_summary":false,"last_poster_username":"jufajardini","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user_id":281,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":320,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"A question about the AF_PACKET TPACKET_V3 implementation","id":6415,"title":"A question about the AF_PACKET TPACKET_V3 implementation","slug":"a-question-about-the-af-packet-tpacket-v3-implementation","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-07-16T21:27:08.803Z","last_posted_at":"2026-07-20T02:21:58.138Z","bumped":true,"bumped_at":"2026-07-20T02:21:58.138Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":25,"name":"suricata","slug":"suricata"}],"tags_descriptions":{},"views":37,"like_count":1,"has_summary":false,"last_poster_username":"Jal","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":2947,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster, Accepted Answer","user_id":431,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"DPDK pktmbuf cache can be 1","id":6377,"title":"DPDK pktmbuf cache can be 1","slug":"dpdk-pktmbuf-cache-can-be-1","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex030/uploads/suricata/optimized/2X/4/4b97ce6e465031391692a622354cd07c15b69eb8_2_1024x584.png","created_at":"2026-06-29T09:18:44.805Z","last_posted_at":"2026-06-29T09:18:44.863Z","bumped":true,"bumped_at":"2026-06-29T09:18:44.863Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":36,"like_count":0,"has_summary":false,"last_poster_username":"liheng562653799","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":2143,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"TCP reset Optimization for REJECT_DIR_DST","id":6376,"title":"TCP reset Optimization for REJECT_DIR_DST","slug":"tcp-reset-optimization-for-reject-dir-dst","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-06-29T08:44:55.775Z","last_posted_at":"2026-06-29T08:44:55.850Z","bumped":true,"bumped_at":"2026-06-29T08:44:55.850Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":30,"like_count":0,"has_summary":false,"last_poster_username":"liheng562653799","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":2143,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"MLNX_OFED has transitioned into DOCA-Host, and now is available as DOCA-OFED profile…","id":6130,"title":"MLNX_OFED has transitioned into DOCA-Host, and now is available as DOCA-OFED profile…","slug":"mlnx-ofed-has-transitioned-into-doca-host-and-now-is-available-as-doca-ofed-profile","posts_count":13,"reply_count":7,"highest_post_number":13,"image_url":"https://canada1.discourse-cdn.com/flex030/uploads/suricata/optimized/2X/3/3ee62d8a3289095f3d39920e11bbb404cf445296_2_1024x537.jpeg","created_at":"2025-12-05T10:14:28.474Z","last_posted_at":"2026-03-25T17:10:00.294Z","bumped":true,"bumped_at":"2026-03-25T17:10:00.294Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":68,"name":"dpdk","slug":"dpdk"}],"tags_descriptions":{},"views":437,"like_count":2,"has_summary":false,"last_poster_username":"cthomas","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user_id":448,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":12,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":431,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":479,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"How to map and interrelate the severity level code?","id":6197,"title":"How to map and interrelate the severity level code?","slug":"how-to-map-and-interrelate-the-severity-level-code","posts_count":5,"reply_count":1,"highest_post_number":5,"image_url":null,"created_at":"2026-02-14T18:46:11.598Z","last_posted_at":"2026-02-25T19:18:40.610Z","bumped":true,"bumped_at":"2026-02-25T19:18:40.610Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":114,"like_count":0,"has_summary":false,"last_poster_username":"Wilker_Luiz_Gadelha","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":2067,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":320,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":2,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Support for Opentelemetry","id":6202,"title":"Support for Opentelemetry","slug":"support-for-opentelemetry","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":"https://canada1.discourse-cdn.com/flex030/uploads/suricata/optimized/2X/b/bffae3c2b0be26e780c4cf106348b1494eda9b0d_2_1024x537.jpeg","created_at":"2026-02-18T13:48:06.316Z","last_posted_at":"2026-02-18T13:49:48.052Z","bumped":true,"bumped_at":"2026-02-18T13:49:48.052Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":25,"name":"suricata","slug":"suricata"}],"tags_descriptions":{},"views":72,"like_count":0,"has_summary":false,"last_poster_username":"vjulien","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user_id":2789,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":2,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Rethinking the SSLproxy/Suricata integration: Divert Mode is a dead end for H2/H3","id":6195,"title":"Rethinking the SSLproxy/Suricata integration: Divert Mode is a dead end for H2/H3","slug":"rethinking-the-sslproxy-suricata-integration-divert-mode-is-a-dead-end-for-h2-h3","posts_count":15,"reply_count":11,"highest_post_number":15,"image_url":null,"created_at":"2026-02-10T22:23:12.963Z","last_posted_at":"2026-02-17T17:48:02.646Z","bumped":true,"bumped_at":"2026-02-17T17:48:02.646Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":466,"like_count":2,"has_summary":false,"last_poster_username":"Soner_Tari","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":2662,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":2,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Observing POP3 recognized as FTP - Suricata 7.0.9","id":5756,"title":"Observing POP3 recognized as FTP - Suricata 7.0.9","slug":"observing-pop3-recognized-as-ftp-suricata-7-0-9","posts_count":5,"reply_count":1,"highest_post_number":5,"image_url":null,"created_at":"2025-06-09T13:31:19.033Z","last_posted_at":"2026-02-13T09:11:41.310Z","bumped":true,"bumped_at":"2026-02-13T09:11:41.310Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":130,"like_count":2,"has_summary":false,"last_poster_username":"cyberm8","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user_id":1009,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":573,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":2782,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"VPP-Suricata Integration: Library Mode Packet Injection","id":6078,"title":"VPP-Suricata Integration: Library Mode Packet Injection","slug":"vpp-suricata-integration-library-mode-packet-injection","posts_count":12,"reply_count":10,"highest_post_number":12,"image_url":null,"created_at":"2025-10-27T16:15:57.121Z","last_posted_at":"2026-01-29T05:55:33.459Z","bumped":true,"bumped_at":"2026-01-29T05:55:33.459Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":434,"like_count":0,"has_summary":false,"last_poster_username":"sbhardwaj","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user_id":2698,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":2746,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":6,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"About CPU/Core requirements by Suricata when DPDK is enabled","id":6157,"title":"About CPU/Core requirements by Suricata when DPDK is enabled","slug":"about-cpu-core-requirements-by-suricata-when-dpdk-is-enabled","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-01-06T10:01:45.109Z","last_posted_at":"2026-01-08T09:40:12.949Z","bumped":true,"bumped_at":"2026-01-08T09:40:12.949Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":136,"like_count":0,"has_summary":false,"last_poster_username":"Muttanna_Hosur","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":1010,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":431,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Question about nDPI 5.0","id":6151,"title":"Question about nDPI 5.0","slug":"question-about-ndpi-5-0","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2025-12-30T14:30:43.890Z","last_posted_at":"2026-01-05T11:44:16.050Z","bumped":true,"bumped_at":"2026-01-05T11:44:16.050Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":25,"name":"suricata","slug":"suricata"}],"tags_descriptions":{},"views":118,"like_count":0,"has_summary":false,"last_poster_username":"vjulien","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user_id":2753,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":2,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Why do we a limit of 60 for ip reputations in Suricata?","id":6137,"title":"Why do we a limit of 60 for ip reputations in Suricata?","slug":"why-do-we-a-limit-of-60-for-ip-reputations-in-suricata","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2025-12-12T16:05:37.773Z","last_posted_at":"2025-12-13T09:36:58.967Z","bumped":true,"bumped_at":"2025-12-13T09:36:58.967Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":25,"name":"suricata","slug":"suricata"},{"id":1,"name":"ips","slug":"ips"}],"tags_descriptions":{},"views":68,"like_count":1,"has_summary":false,"last_poster_username":"vjulien","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user_id":2743,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":2,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"SIP TCP Midstream alproto detect failed due to nop data","id":6132,"title":"SIP TCP Midstream alproto detect failed due to nop data","slug":"sip-tcp-midstream-alproto-detect-failed-due-to-nop-data","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2025-12-09T07:12:25.908Z","last_posted_at":"2025-12-09T07:12:25.955Z","bumped":true,"bumped_at":"2025-12-09T07:12:25.955Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":61,"like_count":0,"has_summary":false,"last_poster_username":"liheng562653799","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":2143,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Is mempool-cache-size effective in DPDK mode in Suricata?","id":6101,"title":"Is mempool-cache-size effective in DPDK mode in Suricata?","slug":"is-mempool-cache-size-effective-in-dpdk-mode-in-suricata","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2025-11-06T09:52:07.419Z","last_posted_at":"2025-11-06T11:43:15.149Z","bumped":true,"bumped_at":"2025-11-06T11:43:15.149Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":25,"name":"suricata","slug":"suricata"},{"id":5,"name":"community","slug":"community"},{"id":68,"name":"dpdk","slug":"dpdk"}],"tags_descriptions":{},"views":108,"like_count":0,"has_summary":false,"last_poster_username":"lukashino","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":true,"posters":[{"extras":null,"description":"Original Poster","user_id":2296,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster, Accepted Answer","user_id":431,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Eve-log filetype redis do not support password configuration","id":6096,"title":"Eve-log filetype redis do not support password configuration","slug":"eve-log-filetype-redis-do-not-support-password-configuration","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2025-11-04T09:16:57.618Z","last_posted_at":"2025-11-05T01:18:39.665Z","bumped":true,"bumped_at":"2025-11-05T01:18:39.665Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":69,"like_count":0,"has_summary":false,"last_poster_username":"liheng562653799","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":2143,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":1,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"AppLayer: NFSv4 Parser bug, OpenRequestContent should add EXCLUSIVE4_1","id":6068,"title":"AppLayer: NFSv4 Parser bug, OpenRequestContent should add EXCLUSIVE4_1","slug":"applayer-nfsv4-parser-bug-openrequestcontent-should-add-exclusive4-1","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2025-10-20T04:40:49.430Z","last_posted_at":"2025-10-28T18:44:44.680Z","bumped":true,"bumped_at":"2025-10-28T18:44:44.680Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":25,"name":"suricata","slug":"suricata"}],"tags_descriptions":{},"views":64,"like_count":0,"has_summary":false,"last_poster_username":"jufajardini","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user_id":2544,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":573,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":320,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Tcp stream: Tcp slide window may be incorrectly used","id":6067,"title":"Tcp stream: Tcp slide window may be incorrectly used","slug":"tcp-stream-tcp-slide-window-may-be-incorrectly-used","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex030/uploads/suricata/original/2X/1/1bdc21bbc76d8a386e05ad61b2450812adc00b53.png","created_at":"2025-10-16T06:20:50.577Z","last_posted_at":"2025-10-16T06:20:50.626Z","bumped":true,"bumped_at":"2025-10-16T06:20:50.626Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":25,"name":"suricata","slug":"suricata"}],"tags_descriptions":{},"views":56,"like_count":0,"has_summary":false,"last_poster_username":"liheng562653799","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":2143,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Output-json-http lead to segfault","id":6062,"title":"Output-json-http lead to segfault","slug":"output-json-http-lead-to-segfault","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2025-10-15T06:38:49.766Z","last_posted_at":"2025-10-16T01:59:24.742Z","bumped":true,"bumped_at":"2025-10-16T01:59:24.742Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":25,"name":"suricata","slug":"suricata"}],"tags_descriptions":{},"views":119,"like_count":0,"has_summary":false,"last_poster_username":"liheng562653799","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":2143,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":7,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Some functions in sip/parser.rs do redundant computing","id":6063,"title":"Some functions in sip/parser.rs do redundant computing","slug":"some-functions-in-sip-parser-rs-do-redundant-computing","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2025-10-15T08:38:11.148Z","last_posted_at":"2025-10-16T01:21:53.159Z","bumped":true,"bumped_at":"2025-10-16T01:21:53.159Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":25,"name":"suricata","slug":"suricata"}],"tags_descriptions":{},"views":88,"like_count":1,"has_summary":false,"last_poster_username":"liheng562653799","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":2143,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":7,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Suricata 8.0 dynamic alproto can not be disabled","id":6059,"title":"Suricata 8.0 dynamic alproto can not be disabled","slug":"suricata-8-0-dynamic-alproto-can-not-be-disabled","posts_count":5,"reply_count":3,"highest_post_number":5,"image_url":null,"created_at":"2025-10-15T05:55:40.768Z","last_posted_at":"2025-10-15T08:25:29.833Z","bumped":true,"bumped_at":"2025-10-15T08:25:29.833Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":25,"name":"suricata","slug":"suricata"}],"tags_descriptions":{},"views":148,"like_count":0,"has_summary":false,"last_poster_username":"liheng562653799","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":2143,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":6,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Some error Suricata 8 installation","id":5882,"title":"Some error Suricata 8 installation","slug":"some-error-suricata-8-installation","posts_count":10,"reply_count":6,"highest_post_number":10,"image_url":null,"created_at":"2025-07-18T21:42:47.994Z","last_posted_at":"2025-10-08T07:04:30.825Z","bumped":true,"bumped_at":"2025-10-08T07:04:30.825Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":25,"name":"suricata","slug":"suricata"}],"tags_descriptions":{},"views":484,"like_count":0,"has_summary":false,"last_poster_username":"pevma","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user_id":2144,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":7,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":12,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"802.1BR E Tag support","id":594,"title":"802.1BR E Tag support","slug":"802-1br-e-tag-support","posts_count":3,"reply_count":0,"highest_post_number":3,"image_url":null,"created_at":"2020-09-11T08:37:10.642Z","last_posted_at":"2025-09-15T13:00:23.182Z","bumped":true,"bumped_at":"2025-09-15T13:00:23.182Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":669,"like_count":0,"has_summary":false,"last_poster_username":"Philippe_Antoine1","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user_id":272,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":9,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":2651,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Suricata 8.0.0 seems to not read pcap files correctly from stdin","id":6016,"title":"Suricata 8.0.0 seems to not read pcap files correctly from stdin","slug":"suricata-8-0-0-seems-to-not-read-pcap-files-correctly-from-stdin","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2025-09-15T12:08:49.958Z","last_posted_at":"2025-09-15T12:08:50.012Z","bumped":true,"bumped_at":"2025-09-15T12:08:50.012Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":66,"name":"bug","slug":"bug"}],"tags_descriptions":{},"views":115,"like_count":0,"has_summary":false,"last_poster_username":"wesley.vanderree","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":2652,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Threading Behavior in Suricata Plugin Development","id":6002,"title":"Threading Behavior in Suricata Plugin Development","slug":"threading-behavior-in-suricata-plugin-development","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2025-09-08T19:08:15.164Z","last_posted_at":"2025-09-08T19:08:15.204Z","bumped":true,"bumped_at":"2025-09-08T19:08:15.204Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":45,"like_count":0,"has_summary":false,"last_poster_username":"Sina","category_id":8,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":2596,"primary_group_id":null,"flair_group_id":null}]}]}}