Project

General

Profile

Actions
Copy link

Bug #4817

closed
JI JI

smtp: smtp transaction not logged if no email is present

Bug #4817: smtp: smtp transaction not logged if no email is present

Added by Jason Ish over 4 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
7.0.0-beta1
Affected Versions:
5.0.7, 6.0.4
Effort:
Difficulty:
Label:
Needs backport to 5.0, Needs backport to 6.0

Description

The SMTP logger will not write out the transaction log if the email portion fails to log, however the other SMTP data may still be valuable. This is what happens when an SMTP transaction is upgraded to TLS with STARTTLS. The SMTP logger runs, but no record is created.

Related issues 2 (0 open — 2 closed)

Copied to Suricata - Bug #4931: smtp: smtp transaction not logged if no email is presentClosedShivani BhardwajActions
Copied to Suricata - Bug #4932: smtp: smtp transaction not logged if no email is presentClosedJeff LucovskyActions

JI Updated by Jason Ish over 4 years ago Actions
Copy link
 #1

  • Status changed from Assigned to In Review

PM Updated by Peter Manev over 4 years ago Actions
Copy link
 #2

Originally reported on the SELKS project https://github.com/StamusNetworks/SELKS/issues/346
Private pcap

JI Updated by Jason Ish over 4 years ago Actions
Copy link
 #3

  • Status changed from In Review to Closed

Merged into master. Should this get a backport?

JI Updated by Jason Ish over 4 years ago Actions
Copy link
 #4

  • Affected Versions 5.0.7, 6.0.4 added

JI Updated by Jason Ish over 4 years ago Actions
Copy link
 #5

  • Label Needs backport to 5.0, Needs backport to 6.0 added

JL Updated by Jeff Lucovsky over 4 years ago Actions
Copy link
 #6

  • Copied to Bug #4931: smtp: smtp transaction not logged if no email is present added

JL Updated by Jeff Lucovsky over 4 years ago Actions
Copy link
 #7

  • Copied to Bug #4932: smtp: smtp transaction not logged if no email is present added
Actions
Copy link

Also available in: PDF Atom