Project

General

Profile

Actions
Copy link

Bug #9235

open
GL GL

sip: app-layer events lost when no transaction exists

Bug #9235: sip: app-layer events lost when no transaction exists

Added by Giuseppe Longo 8 days ago. Updated about 22 hours ago.

Status:
In Review
Priority:
Normal
Assignee:
Giuseppe Longo
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Events are set on the last transaction of the state. If the message in error is the first one of the flow, there's no transaction yet and the event is silently dropped. Otherwise it's set on an earlier transaction, possibly of the other direction and already inspected, so it may never alert.

Subtasks 1 (1 open — 0 closed)

Bug #9290: sip: app-layer events lost when no transaction exists (8.0.x backport)AssignedGiuseppe LongoActions

Related issues 1 (0 open — 1 closed)

Related to Suricata - Security #8979: dnp3: link-layer events before first transaction are droppedClosedJason IshActions

GL Updated by Giuseppe Longo 8 days ago Actions
Copy link
 #1

  • Status changed from New to Assigned
  • Assignee set to Giuseppe Longo
  • Target version changed from TBD to 9.0.0-beta1

PA Updated by Philippe Antoine 5 days ago Actions
Copy link
 #2

  • Related to Security #8979: dnp3: link-layer events before first transaction are dropped added

PA Updated by Philippe Antoine 5 days ago Actions
Copy link
 #3

Do we have a tracking ticket for these ?

JI Updated by Jason Ish about 22 hours ago Actions
Copy link
 #4

  • Status changed from Assigned to In Review
  • Label Needs backport to 8.0 added

GL MR.

Flagging for backport, as it's part of a batch of fixes.

OT Updated by OISF Ticketbot about 22 hours ago Actions
Copy link
 #5

  • Subtask #9290 added

OT Updated by OISF Ticketbot about 22 hours ago Actions
Copy link
 #6

  • Label deleted (Needs backport to 8.0)
Actions
Copy link

Also available in: PDF Atom