Actions
Bug #5161
closedsmb: file not tracked on smb2 async
Affected Versions:
Effort:
Difficulty:
Label:
Description
Suricata fails to alert on a smb signature related to a file extraction.
Investigating a bit the issue the "file_data" keyword does not match (PrefilterTxFiledata) because a file is never seen by Suricata.
Attaching pcap and signature.
Files
Updated by Victor Julien almost 2 years ago
- Status changed from New to Assigned
- Assignee changed from OISF Dev to Philippe Antoine
- Target version changed from TBD to 7.0.0-rc1
Updated by Philippe Antoine almost 2 years ago
- Status changed from Assigned to In Review
Updated by Philippe Antoine almost 2 years ago
- Status changed from In Review to Closed
Updated by Victor Julien almost 2 years ago
- Status changed from Closed to Resolved
Updated by Victor Julien almost 2 years ago
- Subject changed from Suricata fails to see SMB file to smb: file not tracked on smb2 async
Updated by Victor Julien almost 2 years ago
- Status changed from Resolved to Closed
Updated by Victor Julien almost 2 years ago
- Related to Bug #5508: SMB2 async responses are not matched with its request added
Actions