https://redmine.openinfosecfoundation.org/
https://redmine.openinfosecfoundation.org/favicon.ico?1701117002
2015-11-08T04:02:17Z
Open Information Security Foundation
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=5645
2015-11-08T04:02:17Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Target version</strong> changed from <i>3.0RC2</i> to <i>70</i></li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=9974
2018-07-17T08:44:10Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Assignee</strong> changed from <i>Tom DeCanio</i> to <i>OISF Dev</i></li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=10139
2018-08-09T07:46:56Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Blocked by</strong> <i><a class="issue tracker-2 status-5 priority-4 priority-default closed" href="/issues/2572">Feature #2572</a>: extend protocol detection to specify flow direction</i> added</li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=10566
2018-11-28T07:09:50Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Priority</strong> changed from <i>Normal</i> to <i>High</i></li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=10731
2018-12-21T12:07:22Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Related to</strong> <i><a class="issue tracker-2 status-7 priority-4 priority-default" href="/issues/2757">Feature #2757</a>: improve protocol detection</i> added</li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=10966
2019-02-18T08:13:45Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Priority</strong> changed from <i>High</i> to <i>Normal</i></li><li><strong>Target version</strong> changed from <i>70</i> to <i>5.0beta1</i></li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=11270
2019-02-25T09:51:04Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Priority</strong> changed from <i>Normal</i> to <i>High</i></li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=11316
2019-02-28T10:39:36Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Assigned</i></li><li><strong>Assignee</strong> changed from <i>OISF Dev</i> to <i>Philippe Antoine</i></li><li><strong>Priority</strong> changed from <i>High</i> to <i>Normal</i></li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=11869
2019-04-25T11:16:34Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Target version</strong> changed from <i>5.0beta1</i> to <i>5.0rc1</i></li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=12471
2019-06-06T14:04:16Z
Philippe Antoine
<ul><li><strong>Related to</strong> <i><a class="issue tracker-1 status-1 priority-4 priority-default" href="/issues/2978">Bug #2978</a>: IRC traffic parsed by FTP</i> added</li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=13552
2019-09-09T18:08:18Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Target version</strong> changed from <i>5.0rc1</i> to <i>6.0.0beta1</i></li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=15353
2020-02-18T12:52:56Z
Philippe Antoine
<ul><li><strong>Related to</strong> deleted (<i><a class="issue tracker-2 status-7 priority-4 priority-default" href="/issues/2757">Feature #2757</a>: improve protocol detection</i>)</li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=15355
2020-02-18T12:53:04Z
Philippe Antoine
<ul><li><strong>Blocked by</strong> <i><a class="issue tracker-2 status-7 priority-4 priority-default" href="/issues/2757">Feature #2757</a>: improve protocol detection</i> added</li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=15987
2020-04-10T12:53:13Z
Philippe Antoine
<ul><li><strong>Status</strong> changed from <i>Assigned</i> to <i>Feedback</i></li></ul><p>Waiting first for feedback on other related tickets</p>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=16916
2020-07-13T08:49:54Z
Philippe Antoine
<ul></ul><p>Waiting for feedback on <a class="external" href="https://redmine.openinfosecfoundation.org/issues/2757">https://redmine.openinfosecfoundation.org/issues/2757</a> before upgrading<br /><a class="external" href="https://github.com/OISF/suricata/pull/3832">https://github.com/OISF/suricata/pull/3832</a><br /><a class="external" href="https://github.com/OISF/suricata-verify/pull/53">https://github.com/OISF/suricata-verify/pull/53</a></p>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=17088
2020-08-05T12:04:11Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Target version</strong> changed from <i>6.0.0beta1</i> to <i>7.0.0-beta1</i></li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=23867
2022-06-28T14:04:33Z
Philippe Antoine
<ul></ul><p>Both FTP and SMTP start with <code>220</code> from server (followed by either space or hyphen)</p>
<p>For SMTP, it is then supposed to be a valid domain name.<br />But there is no restriction for FTP</p>
<p>There can be (E)SMTP or FTP in the banner...</p>
<p>We can use the ports.</p>
<p>And we can maybe mark this detection as weak, so that client side detection overrides it...</p>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=23869
2022-06-28T19:50:32Z
Philippe Antoine
<ul><li><strong>Status</strong> changed from <i>Feedback</i> to <i>In Review</i></li></ul><p><a class="external" href="https://github.com/OISF/suricata/pull/7578">https://github.com/OISF/suricata/pull/7578</a></p>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=23993
2022-07-06T12:38:30Z
Philippe Antoine
<ul><li><strong>Blocked by</strong> deleted (<i><a class="issue tracker-2 status-7 priority-4 priority-default" href="/issues/2757">Feature #2757</a>: improve protocol detection</i>)</li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=23994
2022-07-06T12:38:37Z
Philippe Antoine
<ul><li><strong>Related to</strong> <i><a class="issue tracker-2 status-7 priority-4 priority-default" href="/issues/2757">Feature #2757</a>: improve protocol detection</i> added</li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=24491
2022-09-14T08:38:43Z
Philippe Antoine
<ul><li><strong>Priority</strong> changed from <i>Normal</i> to <i>Low</i></li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=25057
2022-10-25T09:14:53Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Target version</strong> changed from <i>7.0.0-beta1</i> to <i>7.0.0-rc1</i></li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=26267
2022-12-27T07:54:09Z
Philippe Antoine
<ul><li><strong>Blocked by</strong> <i><a class="issue tracker-1 status-5 priority-4 priority-default closed" href="/issues/5769">Bug #5769</a>: Incomplete values for .stats."app_layer".flow.proto</i> added</li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=26612
2023-01-30T08:31:43Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Target version</strong> changed from <i>7.0.0-rc1</i> to <i>8.0.0-beta1</i></li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=29576
2023-08-30T07:46:25Z
Philippe Antoine
<ul><li><strong>Related to</strong> <i><a class="issue tracker-1 status-1 priority-4 priority-default" href="/issues/6283">Bug #6283</a>: FTP parsing yields in some cases smtp and http event types</i> added</li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=29955
2023-09-19T07:56:59Z
Philippe Antoine
<ul><li><strong>Related to</strong> <i><a class="issue tracker-2 status-7 priority-4 priority-default" href="/issues/6366">Feature #6366</a>: pop3 protocol detection</i> added</li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=29968
2023-09-19T08:45:29Z
Philippe Antoine
<ul><li><strong>Target version</strong> changed from <i>8.0.0-beta1</i> to <i>TBD</i></li></ul>
Suricata - Feature #1125: smtp: improve protocol detection
https://redmine.openinfosecfoundation.org/issues/1125?journal_id=31396
2023-12-01T12:13:40Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Related to</strong> <i><a class="issue tracker-1 status-1 priority-4 priority-default" href="/issues/6591">Bug #6591</a>: protodetect: ftp parsed as smtp</i> added</li></ul>