Project

General

Profile

Actions

Bug #2978

closed
JL PA

IRC traffic parsed by FTP

Bug #2978: IRC traffic parsed by FTP

Added by Jeff Lucovsky about 7 years ago. Updated about 2 months ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Some IRC traffic is being parsed by the FTP parser.

There is a (private) pcap that demonstrates the problem.


Related issues 4 (2 open2 closed)

Related to Suricata - Feature #273: IRC protocol detection supportNewCommunity TicketActions
Related to Suricata - Task #2757: tracking: improve protocol detectionIn ProgressPhilippe AntoineActions
Related to Suricata - Feature #1125: smtp: improve protocol detectionClosedPhilippe AntoineActions
Blocks Suricata - Task #7742: ftp: trigger raw stream inspectionClosedShivani BhardwajActions
Actions

Also available in: PDF Atom