Project

General

Profile

Actions
Copy link

Bug #3651

closed
JL JL

FTP response buffering against TCP stream

Bug #3651: FTP response buffering against TCP stream

Added by Jeff Lucovsky almost 6 years ago. Updated almost 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
5.0.3
Affected Versions:
4.1.6, 5.0.1
Effort:
Difficulty:
Label:

Description

Now, Suricata parses FTP response packets as if they are always complete.
This is not the TCP logic of streaming.
We have to keep buffering until the response is complete, and we can parse multiple responses in one TCP stream in one time.

Found by running suricata-verify tests while doing TCP stream splitting

Fix proposed https://github.com/OISF/suricata/pull/4789

Related issues 1 (0 open — 1 closed)

Copied from Suricata - Bug #3631: FTP response buffering against TCP streamClosedPhilippe AntoineActions

JL Updated by Jeff Lucovsky almost 6 years ago Actions
Copy link
 #1

  • Copied from Bug #3631: FTP response buffering against TCP stream added

VJ Updated by Victor Julien almost 6 years ago Actions
Copy link
 #2

  • Status changed from Assigned to Closed
Actions
Copy link

Also available in: PDF Atom