Project

General

Profile

Actions
Copy link

Bug #2978

open

IRC traffic parsed by FTP

Added by Jeff Lucovsky almost 5 years ago. Updated about 1 year ago.

Status:
New
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
TBD
Affected Versions:
Effort:
Difficulty:
Label:

Description

Some IRC traffic is being parsed by the FTP parser.

There is a (private) pcap that demonstrates the problem.

Related issues 3 (3 open — 0 closed)

Related to Suricata - Feature #273: IRC protocol detection supportNewCommunity TicketActions
Related to Suricata - Feature #2757: improve protocol detectionIn ReviewPhilippe AntoineActions
Related to Suricata - Feature #1125: smtp: improve protocol detectionIn ReviewPhilippe AntoineActions
Actions
Copy link
 #1

Updated by Victor Julien almost 5 years ago

  • Related to Feature #273: IRC protocol detection support added
Actions
Copy link
 #2

Updated by Victor Julien almost 5 years ago

Actions
Copy link
 #3

Updated by Andreas Herz almost 5 years ago

  • Assignee set to OISF Dev
  • Target version set to TBD
Actions
Copy link
 #4

Updated by Philippe Antoine almost 5 years ago

  • Related to Feature #1125: smtp: improve protocol detection added
Actions
Copy link
 #5

Updated by Giuseppe Longo almost 5 years ago

this pcap can be shared?

Actions
Copy link
 #6

Updated by Jeff Lucovsky almost 5 years ago

We are not able to share this pcap file.

Actions
Copy link
 #7

Updated by Philippe Antoine about 3 years ago

  • Assignee changed from OISF Dev to Philippe Antoine
Actions
Copy link

Also available in: Atom PDF