Project

General

Profile

Actions

Bug #5038

closed

tftp: tftp rules failed to load

Added by Jason Ish almost 3 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

A simple rule such as alert tftp any any -> any any (msg:"test"; sid:10008; rev:1;) fails to load with the following error:

[ERRCODE: SC_ERR_UNKNOWN_PROTOCOL(124)] - protocol "tftp" cannot be used in a signature. Either detection for this protocol is not yet supported OR detection has been disabled for protocol through the yaml option app-layer.protocols.tftp.detection-enabled

This appears to have been broken with this commit in the master-6.0.x branch, https://github.com/OISF/suricata/commit/9daa22a021863508d497033939a353b61606de8a, and has been fixed in master with https://github.com/OISF/suricata/commit/c9d664b0a0d8e000aa3846e63b2f93b19302161b which cleanly cherry-picks into master-6.0.x.


Related issues 1 (1 open0 closed)

Related to Suricata - Task #5052: unittest: create test for checking all app_proto registrationsNewOISF DevActions
Actions

Also available in: Atom PDF