Project

General

Profile

Actions

Bug #3650

closed

FTP response buffering against TCP stream

Added by Jeff Lucovsky over 2 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Now, Suricata parses FTP response packets as if they are always complete.
This is not the TCP logic of streaming.
We have to keep buffering until the response is complete, and we can parse multiple responses in one TCP stream in one time.

Found by running suricata-verify tests while doing TCP stream splitting

Fix proposed https://github.com/OISF/suricata/pull/4789


Related issues 1 (0 open1 closed)

Copied from Bug #3631: FTP response buffering against TCP streamClosedPhilippe AntoineActions
Actions #1

Updated by Jeff Lucovsky over 2 years ago

  • Copied from Bug #3631: FTP response buffering against TCP stream added
Actions #2

Updated by Shivani Bhardwaj over 2 years ago

  • Priority changed from Normal to Immediate
Actions #3

Updated by Victor Julien over 2 years ago

  • Assignee changed from Shivani Bhardwaj to Victor Julien
  • Priority changed from Immediate to High
  • Affected Versions 4.1.7 added
  • Affected Versions deleted (5.0.2)
Actions #4

Updated by Victor Julien over 2 years ago

  • Status changed from Assigned to Closed
  • Priority changed from High to Normal
Actions

Also available in: Atom PDF