Suricata 3.0_5 Alerts Screen GUI Bugs

gsiemon

Bill,

I found a couple of bugs on the Alert screen while trying to suppress and disable rules.

If you try to suppress a rule based based on its destination IP then the Information icon gets placed in the Source column and you see title='This alert track by_dst IP is already in the Suppress List'> where the icon should be in the destination IP. It works if you suppress based on Source IP. See attached image.

If I try to disable a rule by clicking on the red x, the GUI refreshes instantly but the rule is never disabled. I need to go into the Rules to do disable it properly.

I'm using Chrome 50 Beta to access the GUI.

Please let me know if you need more information/testing.

Greg
![Suricata GUI 1.png](/public/imported_attachments/1/Suricata GUI 1.png)
![Suricata GUI 1.png_thumb](/public/imported_attachments/1/Suricata GUI 1.png_thumb)

bmeeks

I will look into this one. There were lots of changes in the ALERTS tab code for the Bootstrap and inline IPS updates. Looks like something got messed up with the intermixing of HTML and PHP code.

Bill