Project

General

Profile

Actions

Bug #4817

closed

smtp: smtp transaction not logged if no email is present

Added by Jason Ish almost 3 years ago. Updated almost 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:
Needs backport to 5.0, Needs backport to 6.0

Description

The SMTP logger will not write out the transaction log if the email portion fails to log, however the other SMTP data may still be valuable. This is what happens when an SMTP transaction is upgraded to TLS with STARTTLS. The SMTP logger runs, but no record is created.


Related issues 2 (0 open2 closed)

Copied to Suricata - Bug #4931: smtp: smtp transaction not logged if no email is presentClosedShivani BhardwajActions
Copied to Suricata - Bug #4932: smtp: smtp transaction not logged if no email is presentClosedJeff LucovskyActions
Actions

Also available in: Atom PDF