Project

General

Profile

Actions
Copy link

Bug #4817

closed

smtp: smtp transaction not logged if no email is present

Added by Jason Ish about 3 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
7.0.0-beta1
Affected Versions:
5.0.7, 6.0.4
Effort:
Difficulty:
Label:
Needs backport to 5.0, Needs backport to 6.0

Description

The SMTP logger will not write out the transaction log if the email portion fails to log, however the other SMTP data may still be valuable. This is what happens when an SMTP transaction is upgraded to TLS with STARTTLS. The SMTP logger runs, but no record is created.

Related issues 2 (0 open — 2 closed)

Copied to Suricata - Bug #4931: smtp: smtp transaction not logged if no email is presentClosedShivani BhardwajActions
Copied to Suricata - Bug #4932: smtp: smtp transaction not logged if no email is presentClosedJeff LucovskyActions
Actions
Copy link
 #1

Updated by Jason Ish about 3 years ago

  • Status changed from Assigned to In Review
Actions
Copy link
 #2

Updated by Peter Manev about 3 years ago

Originally reported on the SELKS project https://github.com/StamusNetworks/SELKS/issues/346
Private pcap

Actions
Copy link
 #3

Updated by Jason Ish about 3 years ago

  • Status changed from In Review to Closed

Merged into master. Should this get a backport?

Actions
Copy link
 #4

Updated by Jason Ish about 3 years ago

  • Affected Versions 5.0.7, 6.0.4 added
Actions
Copy link
 #5

Updated by Jason Ish about 3 years ago

  • Label Needs backport to 5.0, Needs backport to 6.0 added
Actions
Copy link
 #6

Updated by Jeff Lucovsky almost 3 years ago

  • Copied to Bug #4931: smtp: smtp transaction not logged if no email is present added
Actions
Copy link
 #7

Updated by Jeff Lucovsky almost 3 years ago

  • Copied to Bug #4932: smtp: smtp transaction not logged if no email is present added
Actions
Copy link

Also available in: Atom PDF