Project

General

Profile

Actions
Copy link

Bug #6743

open

stream/tcp: spurious retransmission seen as invalid

Added by Philippe Antoine over 1 year ago. Updated 18 days ago.

Status:
New
Priority:
Normal
Assignee:
Victor Julien
Target version:
9.0.0-beta1
Affected Versions:
8.0.0
Effort:
Difficulty:
Label:

Description

pcap from SV test bug-2576-02

cf https://github.com/OISF/suricata/pull/10304#issuecomment-1925247178

Actions
Copy link
 #1

Updated by Victor Julien 7 months ago

  • Target version changed from 8.0.0-beta1 to 8.0.0-rc1
Actions
Copy link
 #2

Updated by Victor Julien about 2 months ago

  • Target version changed from 8.0.0-rc1 to 9.0.0-beta1
Actions
Copy link
 #3

Updated by Philippe Antoine 18 days ago

  • Affected Versions 8.0.0 added

Reproduce with

diff --git a/tests/bug-2576-02/suricata.yaml b/tests/bug-2576-02/suricata.yaml
index 1e40c3aa..631ddad2 100644
--- a/tests/bug-2576-02/suricata.yaml
+++ b/tests/bug-2576-02/suricata.yaml
@@ -53,6 +53,15 @@ outputs:
         header: X-Forwarded-For

       types:
+        - anomaly:
+            enabled: yes
+            #
+            # Choose one or more types of anomaly logging and whether to enable
+            # logging of the packet header for packet anomalies.
+            types:
+              # decode: no
+              stream: yes
+              # applayer: yes
         - alert:
             # payload: yes             # enable dumping payload in Base64
             # payload-buffer-size: 4kb # max size of payload buffer to output in eve-log

and jq .anomaly output/eve.json

Actions
Copy link

Also available in: Atom PDF