Project

General

Profile

Actions

Bug #5205

closed

FTP-data unrecognized depending on multi-threading

Added by Philippe Antoine about 2 years ago. Updated about 1 year ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

With the default configuration, ie autofp-scheduler: hash the first packet of FTP-data can be processed before the expectation gets created, depending on the scheduling of the threads

A workaround is to use autofp-scheduler: ippair


Related issues 3 (0 open3 closed)

Related to Suricata - Bug #3728: ftp file extraction failureClosedActions
Related to Suricata - Bug #5443: ftp-data: failed assertionClosedVictor JulienActions
Is duplicate of Suricata - Bug #4539: ftp-data protocol not detected in autofp runmodeClosedActions
Actions

Also available in: Atom PDF