Suricata

DNP3 preprocessor fails to correctly reassemble DNP3 fragments in some cases, generating a spurious "SURICATA DNP3 Length too small" error. As the attached two examples show, the problem seems to occur where the final frame of the fragment has an all-zero's payload excluding CRC's and transport byte, though I don't know if this is a necessary or sufficient condition.