Project

General

Profile

Actions
Copy link

Feature #2054

closed
PL AB

Extracting HTTPS URL´s from SMTP, currently only HTTP is supported

Feature #2054: Extracting HTTPS URL´s from SMTP, currently only HTTP is supported

Added by Per Le about 9 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Aaron Bungay
Target version:
7.0.0-beta1
Effort:
medium
Difficulty:
medium
Label:

Description

Hello :)
We are looking for extracting HTTPS URL´s from SMTP. Currently, only HTTP is supported
Can you please add this?

Related issues 1 (0 open — 1 closed)

Has duplicate Suricata - Feature #2724: extract-urls in email mime decoder increasingly obsoleteRejectedActions

AH Updated by Andreas Herz about 9 years ago Actions
Copy link
 #1

  • Assignee set to OISF Dev
  • Target version set to TBD

DG Updated by Drew G over 8 years ago Actions
Copy link
 #2

Ideally, it would be great if this had some granularity that was configurable. Something like:

#Default (same result as current code)
extract-urls: yes
extract-urls-schemes: [http]
log-url-scheme: no

eve.json ->

...,"url":["suricata-ids.org"],...


#Proposed Feature
extract-urls: yes
extract-urls-schemes: [http, https, ftp, mailto]
log-url-scheme: yes

eve.json ->

...,"url":["http:\/\/suricata-ids.org","https:\/\/suricata-ids.org"],...

VJ Updated by Victor Julien over 8 years ago Actions
Copy link
 #3

  • Assignee changed from OISF Dev to Anonymous

I like the idea. Happy to take a pull request.

VJ Updated by Victor Julien almost 8 years ago Actions
Copy link
 #4

  • Effort set to medium
  • Difficulty set to medium

VJ Updated by Victor Julien over 7 years ago Actions
Copy link
 #5

  • Has duplicate Feature #2724: extract-urls in email mime decoder increasingly obsolete added

AH Updated by Andreas Herz about 7 years ago Actions
Copy link
 #6

  • Assignee set to Community Ticket

AB Updated by Aaron Bungay about 6 years ago Actions
Copy link
 #7

Looking into this.

VJ Updated by Victor Julien almost 6 years ago Actions
Copy link
 #9

  • Status changed from New to In Review
  • Assignee changed from Community Ticket to Aaron Bungay
  • Target version changed from TBD to 6.0.0beta1

VJ Updated by Victor Julien almost 6 years ago Actions
Copy link
 #10

  • Target version changed from 6.0.0beta1 to 7.0.0-beta1

VJ Updated by Victor Julien about 4 years ago Actions
Copy link
 #11

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: PDF Atom