Actions
Bug #2492
closedInverted IP params in fileinfo events
Affected Versions:
Effort:
Difficulty:
Label:
Updated by Eric Leblond about 6 years ago
- Subject changed from INverted IP params in fileinfo events to Inverted IP params in fileinfo events
- Assignee set to Eric Leblond
- Target version set to 4.1rc1
The fileinfo event for a HTTP GET request has the destination IP params set to the server instead of having it set to the client. The entry should respect the way of the data in the TCP session.
Updated by Victor Julien about 6 years ago
I think the logging should respect the file direction. In all implementations the files are in per-direction 'FileContainers' so this could be used to get the direction of the file.
Updated by Eric Leblond about 6 years ago
Proposal implementation there: https://github.com/OISF/suricata/pull/3344
Updated by Victor Julien almost 6 years ago
- Status changed from New to Closed
Actions