Project

General

Profile

Actions

Bug #5205

closed

FTP-data unrecognized depending on multi-threading

Added by Philippe Antoine almost 3 years ago. Updated almost 2 years ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

With the default configuration, ie autofp-scheduler: hash the first packet of FTP-data can be processed before the expectation gets created, depending on the scheduling of the threads

A workaround is to use autofp-scheduler: ippair


Related issues 3 (0 open3 closed)

Related to Suricata - Bug #3728: ftp file extraction failureClosedActions
Related to Suricata - Bug #5443: ftp-data: failed assertionClosedVictor JulienActions
Is duplicate of Suricata - Bug #4539: ftp-data protocol not detected in autofp runmodeClosedActions
Actions #1

Updated by Philippe Antoine almost 3 years ago

  • Status changed from New to In Review
Actions #2

Updated by Victor Julien over 2 years ago

  • Is duplicate of Bug #4539: ftp-data protocol not detected in autofp runmode added
Actions #3

Updated by Victor Julien over 2 years ago

  • Related to Bug #3728: ftp file extraction failure added
Actions #4

Updated by Philippe Antoine over 2 years ago

  • Related to Bug #5443: ftp-data: failed assertion added
Actions #5

Updated by Philippe Antoine over 2 years ago

  • Assignee changed from OISF Dev to Philippe Antoine
  • Target version changed from TBD to 7.0.0-beta1
Actions #6

Updated by Philippe Antoine over 2 years ago

  • Status changed from In Review to Closed

Tracked in #5205

Actions #7

Updated by Victor Julien about 2 years ago

@Philippe Antoine this is closed with a reference to itself, which isn't valid. Can you update the reference or reopen if needed?

Actions #8

Updated by Philippe Antoine about 2 years ago

  • Status changed from Closed to In Review

Indeed, do not know what I messed up here https://github.com/OISF/suricata/pull/7769

Actions #9

Updated by Victor Julien about 2 years ago

  • Target version changed from 7.0.0-beta1 to 7.0.0-rc1
Actions #10

Updated by Philippe Antoine almost 2 years ago

  • Status changed from In Review to Closed
Actions

Also available in: Atom PDF