Project

General

Profile

Actions

Feature #2054

open

Extracting HTTPS URL´s from SMTP, currently only HTTP is supported

Added by Per Le over 4 years ago. Updated about 1 year ago.

Status:
In Review
Priority:
Normal
Assignee:
Target version:
Effort:
medium
Difficulty:
medium
Label:

Description

Hello :)
We are looking for extracting HTTPS URL´s from SMTP. Currently, only HTTP is supported
Can you please add this?


Related issues

Has duplicate Feature #2724: extract-urls in email mime decoder increasingly obsoleteRejectedActions
Actions #1

Updated by Andreas Herz over 4 years ago

  • Assignee set to OISF Dev
  • Target version set to TBD
Actions #2

Updated by Drew G almost 4 years ago

Ideally, it would be great if this had some granularity that was configurable. Something like:

#Default (same result as current code)
extract-urls: yes
extract-urls-schemes: [http]
log-url-scheme: no

eve.json ->

...,"url":["suricata-ids.org"],...

#Proposed Feature
extract-urls: yes
extract-urls-schemes: [http, https, ftp, mailto]
log-url-scheme: yes

eve.json ->

...,"url":["http:\/\/suricata-ids.org","https:\/\/suricata-ids.org"],...

Actions #3

Updated by Victor Julien almost 4 years ago

  • Assignee changed from OISF Dev to Anonymous

I like the idea. Happy to take a pull request.

Actions #4

Updated by Victor Julien about 3 years ago

  • Effort set to medium
  • Difficulty set to medium
Actions #5

Updated by Victor Julien almost 3 years ago

  • Has duplicate Feature #2724: extract-urls in email mime decoder increasingly obsolete added
Actions #6

Updated by Andreas Herz over 2 years ago

  • Assignee set to Community Ticket
Actions #7

Updated by Aaron Bungay over 1 year ago

Looking into this.

Actions #9

Updated by Victor Julien about 1 year ago

  • Status changed from New to In Review
  • Assignee changed from Community Ticket to Aaron Bungay
  • Target version changed from TBD to 6.0.0beta1
Actions #10

Updated by Victor Julien about 1 year ago

  • Target version changed from 6.0.0beta1 to 7.0rc1
Actions

Also available in: Atom PDF