Project

General

Profile

Actions
Copy link

Bug #8355

closed
GL GL

sip: protocol detection incorrectly matches ssdp traffic

Bug #8355: sip: protocol detection incorrectly matches ssdp traffic

Added by Giuseppe Longo 7 months ago. Updated 12 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Giuseppe Longo
Target version:
9.0.0-beta1
Affected Versions:
git main
Effort:
Difficulty:
Label:

Description

SIP protocol detection registers bare method names (e.g., NOTIFY, SUBSCRIBE) as pattern-matching keywords.
Since SSDP uses some of the same methods but the version string HTTP/1.1 instead of SIP/2.0, SSDP traffic can be incorrectly identified as SIP.

Subtasks 1 (0 open — 1 closed)

Bug #9035: sip: protocol detection incorrectly matches ssdp traffic (8.0.x backport)ClosedGiuseppe LongoActions

GL Updated by Giuseppe Longo 7 months ago ยท Edited Actions
Copy link
 #1

Example below:


{
  "timestamp": "2014-02-27T19:44:43.164211+0100",
  "flow_id": 986757542077835,
  "event_type": "flow",
  "src_ip": "192.168.1.1",
  "src_port": 9489,
  "dest_ip": "239.255.255.250",
  "dest_port": 1900,
  "ip_v": 4,
  "proto": "UDP",
  "app_proto": "sip",
  "flow": {
    ...
  }
}

PA Updated by Philippe Antoine 4 months ago Actions
Copy link
 #2

  • Status changed from New to In Review

PA Updated by Philippe Antoine 4 months ago Actions
Copy link
 #3

  • Status changed from In Review to Closed

GL Updated by Giuseppe Longo 18 days ago Actions
Copy link
 #4

  • Status changed from Closed to Resolved
  • Label Needs backport to 8.0 added

OT Updated by OISF Ticketbot 18 days ago Actions
Copy link
 #5

  • Subtask #9035 added

OT Updated by OISF Ticketbot 18 days ago Actions
Copy link
 #6

  • Label deleted (Needs backport to 8.0)

JI Updated by Jason Ish 12 days ago Actions
Copy link
 #7

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: PDF Atom