Project

General

Profile

Actions
Copy link

Bug #8378

closed
PA PA

dcerpc: handle multiple bind/alter_context with their context_id to log the right interfaces

Bug #8378: dcerpc: handle multiple bind/alter_context with their context_id to log the right interfaces

Added by Philippe Antoine about 1 month ago. Updated 23 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Currently, we reset and only keep the context ids from last bind/alter context.

But further requests/response may use old already established context ids

Subtasks 2 (0 open — 2 closed)

Bug #8379: dcerpc: use bind context_id to log the right interfaces (8.0.x backport)RejectedPhilippe AntoineActions
Bug #8380: dcerpc: bind interfaces get overwritten with new requests/responses (8.0.x backport)ClosedPhilippe AntoineActions

Related issues 1 (0 open — 1 closed)

Copied from Suricata - Bug #8375: smb/dcerpc: use bind context_id to log the right interfacesClosedPhilippe AntoineActions

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #1

  • Copied from Bug #8375: smb/dcerpc: use bind context_id to log the right interfaces added

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #2

  • Subtask #8379 added

OT Updated by OISF Ticketbot about 1 month ago Actions
Copy link
 #3

  • Subtask #8380 added

OT Updated by OISF Ticketbot about 1 month ago Actions
Copy link
 #4

  • Label deleted (Needs backport to 8.0)

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #5

  • Status changed from In Progress to In Review

SB Updated by Shivani Bhardwaj about 1 month ago Actions
Copy link
 #6

  • Subject changed from dcerpc: use bind context_id to log the right interfaces to dcerpc: bind interfaces get overwritten with new requests/responses

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #7

I do not like the new title :

bind interfaces get overwritten with new bind/alter_context requests/responses
They do not get overwritten with new requests/responses requests/responses

So, I find it confusing

SB Updated by Shivani Bhardwaj about 1 month ago Actions
Copy link
 #8

Philippe Antoine wrote in #note-7:

I do not like the new title :

bind interfaces get overwritten with new bind/alter_context requests/responses
They do not get overwritten with new requests/responses requests/responses

So, I find it confusing

Please feel free to update it to make it less confusing. The idea is to write the bug in the title and not what is being done to fix the bug so we can have the bug spelled out correctly in Changelog :)

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #9

  • Subject changed from dcerpc: bind interfaces get overwritten with new requests/responses to dcerpc: handle multiple bind/alter_context with their context_id to log the right interfaces

PA Updated by Philippe Antoine 29 days ago Actions
Copy link
 #10

  • Status changed from In Review to Resolved

PA Updated by Philippe Antoine 23 days ago Actions
Copy link
 #11

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: PDF Atom