Project

General

Profile

Actions
Copy link

Bug #2495

closed
EL

Stream depth and filestore interaction

Bug #2495: Stream depth and filestore interaction

Added by Eric Leblond about 8 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
4.0.4, 4.1beta1
Effort:
Difficulty:
Label:

Description

In the case where stream reassembly depth is set 0 and where file store stream-depth is non null, Suricata is stopping the streaming as soon as filestore is triggered resulting in truncated capture and fileinfo.

Related issues 3 (0 open — 3 closed)

Related to Suricata - Bug #2264: file-store.stream-depth not working as expected when configured to a specfic valueClosedGiuseppe LongoActions
Related to Suricata - Bug #2506: filestore v1: with stream-depth not null, files are never truncated ClosedJeff LucovskyActions
Related to Suricata - Support #2369: option force-filestore generate truncated fileClosedActions

VJ Updated by Victor Julien almost 8 years ago Actions
Copy link
 #2

  • Target version changed from 4.1rc1 to TBD

VJ Updated by Victor Julien about 7 years ago Actions
Copy link
 #3

  • Status changed from New to Assigned

I see the PR was merged. Should this be closed?

AH Updated by Andreas Herz almost 7 years ago Actions
Copy link
 #4

  • Status changed from Assigned to Closed

AH Updated by Andreas Herz almost 7 years ago Actions
Copy link
 #5

  • Status changed from Closed to Assigned

waiting for an additional PR

AH Updated by Andreas Herz almost 7 years ago Actions
Copy link
 #6

  • Target version changed from TBD to 70

AH Updated by Andreas Herz almost 7 years ago Actions
Copy link
 #7

maybe related to #2264 and #2506 which have it other way round with the settings?

VJ Updated by Victor Julien almost 7 years ago Actions
Copy link
 #8

  • Related to Bug #2264: file-store.stream-depth not working as expected when configured to a specfic value added

VJ Updated by Victor Julien almost 7 years ago Actions
Copy link
 #9

  • Related to Bug #2506: filestore v1: with stream-depth not null, files are never truncated added

VJ Updated by Victor Julien almost 7 years ago Actions
Copy link
 #10

  • Related to Support #2369: option force-filestore generate truncated file added

VJ Updated by Victor Julien about 6 years ago Actions
Copy link
 #11

  • Assignee changed from Eric Leblond to OISF Dev

VJ Updated by Victor Julien about 6 years ago Actions
Copy link
 #12

It is unclear why the ticket can't be closed. We need an explanation of this and preferably a test case. I'll close the ticket soon if there will be no further updates.

VJ Updated by Victor Julien over 5 years ago Actions
Copy link
 #13

  • Status changed from Assigned to Closed
  • Assignee deleted (OISF Dev)
  • Target version deleted (70)
Actions
Copy link

Also available in: PDF Atom