Project

General

Profile

Actions
Copy link

Bug #8378

closed
PA PA

dcerpc: handle multiple bind/alter_context with their context_id to log the right interfaces

Bug #8378: dcerpc: handle multiple bind/alter_context with their context_id to log the right interfaces

Added by Philippe Antoine 2 months ago. Updated about 1 month ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Currently, we reset and only keep the context ids from last bind/alter context.

But further requests/response may use old already established context ids

Subtasks 2 (0 open — 2 closed)

Bug #8379: dcerpc: use bind context_id to log the right interfaces (8.0.x backport)RejectedPhilippe AntoineActions
Bug #8380: dcerpc: bind interfaces get overwritten with new requests/responses (8.0.x backport)ClosedPhilippe AntoineActions

Related issues 1 (0 open — 1 closed)

Copied from Suricata - Bug #8375: smb/dcerpc: use bind context_id to log the right interfacesClosedPhilippe AntoineActions
Actions
Copy link

Also available in: PDF Atom