Project

General

Profile

Actions
Copy link

Bug #8009

open

NFSv3: File extraction bug when stable equal with FILE_SYNC

Added by QianKai Lin 11 days ago.

Status:
New
Priority:
Normal
Assignee:
-
Target version:
TBD
Affected Versions:
git main
Effort:
medium
Difficulty:
Label:
Protocol, Rust

Description

Description

When I used Suricata to read this pcap file, the generated file was only a little over 1 KB in size.

Reason

In process_write_record, that assume stable == 2 is last chunk, but file_data.len() maybe less than file_len from WRITE command, so it lead to the file data loss.

Files

test_nfsv3.pcap (13.3 MB) test_nfsv3.pcap QianKai Lin, 10/21/2025 02:04 AM

No data to display

Actions
Copy link

Also available in: Atom PDF