Project

General

Profile

Actions
Copy link

Bug #2978

closed
JL PA

IRC traffic parsed by FTP

Bug #2978: IRC traffic parsed by FTP

Added by Jeff Lucovsky almost 7 years ago. Updated 7 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Some IRC traffic is being parsed by the FTP parser.

There is a (private) pcap that demonstrates the problem.

Related issues 4 (2 open — 2 closed)

Related to Suricata - Feature #273: IRC protocol detection supportNewCommunity TicketActions
Related to Suricata - Task #2757: improve protocol detectionIn ReviewPhilippe AntoineActions
Related to Suricata - Feature #1125: smtp: improve protocol detectionClosedPhilippe AntoineActions
Blocks Suricata - Task #7742: ftp: trigger raw stream inspectionClosedShivani BhardwajActions

VJ Updated by Victor Julien almost 7 years ago Actions
Copy link
 #1

  • Related to Feature #273: IRC protocol detection support added

VJ Updated by Victor Julien almost 7 years ago Actions
Copy link
 #2

  • Related to Task #2757: improve protocol detection added

AH Updated by Andreas Herz almost 7 years ago Actions
Copy link
 #3

  • Assignee set to OISF Dev
  • Target version set to TBD

PA Updated by Philippe Antoine almost 7 years ago Actions
Copy link
 #4

  • Related to Feature #1125: smtp: improve protocol detection added

GL Updated by Giuseppe Longo almost 7 years ago Actions
Copy link
 #5

this pcap can be shared?

JL Updated by Jeff Lucovsky almost 7 years ago Actions
Copy link
 #6

We are not able to share this pcap file.

PA Updated by Philippe Antoine about 5 years ago Actions
Copy link
 #7

  • Assignee changed from OISF Dev to Philippe Antoine

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
 #10

  • Status changed from New to In Progress

SB Updated by Shivani Bhardwaj 10 months ago Actions
Copy link
 #11

  • Blocks Task #7742: ftp: trigger raw stream inspection added

PA Updated by Philippe Antoine 9 months ago Actions
Copy link
 #12

  • Status changed from In Progress to Feedback

@Jeff Lucovsky is there still the problem in 8 ?

JL Updated by Jeff Lucovsky 9 months ago Actions
Copy link
 #13

Let's close it and re-open if it recurs.

PA Updated by Philippe Antoine 9 months ago Actions
Copy link
 #14

  • Status changed from Feedback to Closed

SB Updated by Shivani Bhardwaj 4 months ago Actions
Copy link
 #15

  • Status changed from Closed to Assigned

Re-opening as seen again. Ref: https://github.com/OISF/suricata/pull/14487

PA Updated by Philippe Antoine 4 months ago Actions
Copy link
 #16

  • Target version changed from TBD to 9.0.0-beta1

PA Updated by Philippe Antoine 3 months ago Actions
Copy link
 #17

  • Status changed from Assigned to In Review

PA Updated by Philippe Antoine 7 days ago Actions
Copy link
 #18

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: PDF Atom