Project

General

Profile

Actions

Bug #3347

closed

BPF filter on command line not honored for pcap file (4.1.x)

Added by Victor Julien almost 2 years ago. Updated almost 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

A regression has been introduced in Suricata 4.1.0 (through 5.0). The BPF filter is not honored in pcap file mode if it is put on the command line.

For example, in the following command the filter is completely ignored:

suricata -r myfile.pcap port 22


Related issues

Copied from Bug #3346: BPF filter on command line not honored for pcap fileClosedEric LeblondActions
Actions #1

Updated by Victor Julien almost 2 years ago

  • Copied from Bug #3346: BPF filter on command line not honored for pcap file added
Actions #2

Updated by Victor Julien almost 2 years ago

  • Status changed from Assigned to Closed
Actions

Also available in: Atom PDF