Project

General

Profile

Actions
Copy link

Feature #2724

closed

extract-urls in email mime decoder increasingly obsolete

Added by Michael Stone about 6 years ago. Updated about 6 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:

Description

If app-layer.protocols.smtp.mime.extract-urls is set to yes in suricata.yaml, only URLs beginning with http:// are extracted. At a minimum, at least https:// should be recognized as a URL. Ideally, the list of recognized URL protocols would also include things like ftp:// or smb://

Related issues 1 (0 open — 1 closed)

Is duplicate of Suricata - Feature #2054: Extracting HTTPS URL´s from SMTP, currently only HTTP is supportedClosedAaron BungayActions
Actions
Copy link

Also available in: Atom PDF