Project

General

Profile

Actions
Copy link

Feature #2724

closed

extract-urls in email mime decoder increasingly obsolete

Added by Michael Stone almost 6 years ago. Updated almost 6 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:

Description

If app-layer.protocols.smtp.mime.extract-urls is set to yes in suricata.yaml, only URLs beginning with http:// are extracted. At a minimum, at least https:// should be recognized as a URL. Ideally, the list of recognized URL protocols would also include things like ftp:// or smb://

Related issues 1 (0 open — 1 closed)

Is duplicate of Suricata - Feature #2054: Extracting HTTPS URL´s from SMTP, currently only HTTP is supportedClosedAaron BungayActions
Actions
Copy link
 #1

Updated by Victor Julien almost 6 years ago

  • Tracker changed from Bug to Feature
  • Assignee set to Anonymous
  • Target version set to TBD
  • Effort set to low
  • Difficulty set to low

I agree it would be good to be able to provide a list of strings that are the start of an URL.

Actions
Copy link
 #2

Updated by Victor Julien almost 6 years ago

  • Is duplicate of Feature #2054: Extracting HTTPS URL´s from SMTP, currently only HTTP is supported added
Actions
Copy link
 #3

Updated by Victor Julien almost 6 years ago

  • Status changed from New to Rejected
  • Assignee deleted (Anonymous)
  • Target version deleted (TBD)
  • Effort deleted (low)
  • Difficulty deleted (low)

Closed as duplicate of #2054

Actions
Copy link

Also available in: Atom PDF