Project

General

Profile

Actions
Copy link

Support #3163

closed
JS

The modbus engine doesn't detect the modbus response data

Support #3163: The modbus engine doesn't detect the modbus response data

Added by John Smith about 7 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Affected Versions:
4.1.4
Label:

Description

The suricata version is 4.1.4.
And I still send the modbus request data and response data.
But only see the modbus-detect-engine detects the request data.
So I want to know the 4.1.4 doesn't detect the response data or I run in a wrong way?
Thank you!

JS Updated by John Smith about 7 years ago Actions
Copy link
 #1

oh,I know why?Because these is no register to the modbus response data in detect-modbus.c

VJ Updated by Victor Julien about 7 years ago Actions
Copy link
 #2

  • Assignee deleted (Victor Julien)

AH Updated by Andreas Herz almost 7 years ago Actions
Copy link
 #3

  • Assignee set to OISF Dev
  • Affected Versions 4.1.4 added

VJ Updated by Victor Julien almost 7 years ago Actions
Copy link
 #4

Can you provide a test case (pcap)?

AH Updated by Andreas Herz almost 7 years ago Actions
Copy link
 #5

  • Target version set to Support

VJ Updated by Victor Julien over 6 years ago Actions
Copy link
 #6

  • Status changed from New to Closed
  • Assignee deleted (OISF Dev)
Actions
Copy link

Also available in: PDF Atom