Bug #6973: detect: log relevant frames app-layer metdata - Suricata - Open Information Security Foundation

Custom queries

8.0.0 Stories
Good First Issues
OISF community
Open Doc tasks

Actions

Copy link

Bug #6973

closed

JF PA

detect: log relevant frames app-layer metdata

Bug #6973: detect: log relevant frames app-layer metdata

Added by Juliana Fajardini Reichow almost 2 years ago. Updated over 1 year ago.

Status:

Closed

Priority:

Normal

Assignee:

Philippe Antoine

Target version:

8.0.0-beta1

Affected Versions:

Effort:

Difficulty:

Label:

Description

Proposed patch already exists (cf https://github.com/OISF/suricata/pull/10924), but was suggested that it had its own ticket

Subtasks 2 (0 open — 2 closed)

	Bug #6974: detect: log relevant frames app-layer metdata (6.0.x backport)	Rejected	Philippe Antoine	Actions
	Bug #6975: detect: log relevant frames app-layer metdata (7.0.x backport)	Closed	Philippe Antoine	Actions

Related issues 2 (0 open — 2 closed)

	Related to Suricata - Bug #6846: eve/alerts: wrongly using tx id 0 when there is no tx	Closed	Philippe Antoine	Actions
	Related to Suricata - Security #6900: http2: timeout logging headers	Closed	Philippe Antoine	Actions

Issue # Delay: days Cancel Multiple values allowed (comma separated).

History
Notes
Property changes

JF Updated by Juliana Fajardini Reichow almost 2 years ago Actions
Copy link
#1

Related to Bug #6846: eve/alerts: wrongly using tx id 0 when there is no tx added

OT Updated by OISF Ticketbot almost 2 years ago Actions
Copy link
#2

Subtask #6974 added

OT Updated by OISF Ticketbot almost 2 years ago Actions
Copy link
#3

Label deleted (~~Needs backport to 6.0~~)

OT Updated by OISF Ticketbot almost 2 years ago Actions
Copy link
#4

Subtask #6975 added

OT Updated by OISF Ticketbot almost 2 years ago Actions
Copy link
#5

Label deleted (~~Needs backport to 7.0~~)

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#6

Current master situation :
app-layer data does not get logged for frames, since commit 2b4e10224eaebb613352e9b82556b60035d032a1
Before that, and in main7, app-layer data gets logged, but we log tx id 0 if no specific tx was specified.

Also, the lack of tests suggest that there are many protocols which do not set the tx id for their frames...
Which may be due to the unfriendliness of the rust API to create anew frame with a known tx id...

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#7

Status changed from New to In Progress

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#8

Status changed from In Progress to In Review

https://github.com/OISF/suricata/pull/10979

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#9

Related to Security #6900: http2: timeout logging headers added

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#10

Status changed from In Review to Resolved

https://github.com/OISF/suricata/pull/11064

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#11

Status changed from Resolved to Closed

VJ Updated by Victor Julien over 1 year ago Actions
Copy link
#12

Private changed from Yes to No

Actions

Copy link

Also available in: PDF Atom

Project

General

Profile

Suricata

Custom queries

Bug #6973

detect: log relevant frames app-layer metdata

JF Updated by Juliana Fajardini Reichow almost 2 years ago Actions
Copy link
#1

OT Updated by OISF Ticketbot almost 2 years ago Actions
Copy link
#2

OT Updated by OISF Ticketbot almost 2 years ago Actions
Copy link
#3

OT Updated by OISF Ticketbot almost 2 years ago Actions
Copy link
#4

OT Updated by OISF Ticketbot almost 2 years ago Actions
Copy link
#5

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#6

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#7

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#8

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#9

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#10

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#11

VJ Updated by Victor Julien over 1 year ago Actions
Copy link
#12

Project

General

Profile

Suricata

Custom queries

Bug #6973

detect: log relevant frames app-layer metdata

JF Updated by Juliana Fajardini Reichow almost 2 years ago ActionsCopy link #1

OT Updated by OISF Ticketbot almost 2 years ago ActionsCopy link #2

OT Updated by OISF Ticketbot almost 2 years ago ActionsCopy link #3

OT Updated by OISF Ticketbot almost 2 years ago ActionsCopy link #4

OT Updated by OISF Ticketbot almost 2 years ago ActionsCopy link #5

PA Updated by Philippe Antoine almost 2 years ago ActionsCopy link #6

PA Updated by Philippe Antoine almost 2 years ago ActionsCopy link #7

PA Updated by Philippe Antoine almost 2 years ago ActionsCopy link #8

PA Updated by Philippe Antoine almost 2 years ago ActionsCopy link #9

PA Updated by Philippe Antoine almost 2 years ago ActionsCopy link #10

PA Updated by Philippe Antoine almost 2 years ago ActionsCopy link #11

VJ Updated by Victor Julien over 1 year ago ActionsCopy link #12

JF Updated by Juliana Fajardini Reichow almost 2 years ago Actions
Copy link
#1

OT Updated by OISF Ticketbot almost 2 years ago Actions
Copy link
#2

OT Updated by OISF Ticketbot almost 2 years ago Actions
Copy link
#3

OT Updated by OISF Ticketbot almost 2 years ago Actions
Copy link
#4

OT Updated by OISF Ticketbot almost 2 years ago Actions
Copy link
#5

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#6

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#7

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#8

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#9

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#10

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
#11

VJ Updated by Victor Julien over 1 year ago Actions
Copy link
#12