Project

General

Profile

Actions

Feature #2648

open

store captured data into file

Added by Hugo Lequien almost 3 years ago. Updated over 2 years ago.

Status:
New
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

Problematic :
- file reconstruction does not work on ip stream
- luajit only receives chunks of the stream (1250 bytes max)
- Malwares and large exploits can be injected via non-http flows, but it is impossible to perform a confirmation check (via lua or 3rd-party software) because the matched stream can not be properly passed to them.

Solution :
A new feature to store the stream to a file. Preferably enabled by a keyword in a rule to avoid storing every matching rule.

Actions #1

Updated by Andreas Herz over 2 years ago

  • Assignee set to Community Ticket
  • Target version set to TBD
Actions

Also available in: Atom PDF