Project

General

Profile

Actions
Copy link

Bug #9235

open
GL GL

sip: app-layer events lost when no transaction exists

Bug #9235: sip: app-layer events lost when no transaction exists

Added by Giuseppe Longo 8 days ago. Updated about 22 hours ago.

Status:
In Review
Priority:
Normal
Assignee:
Giuseppe Longo
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Events are set on the last transaction of the state. If the message in error is the first one of the flow, there's no transaction yet and the event is silently dropped. Otherwise it's set on an earlier transaction, possibly of the other direction and already inspected, so it may never alert.

Subtasks 1 (1 open — 0 closed)

Bug #9290: sip: app-layer events lost when no transaction exists (8.0.x backport)AssignedGiuseppe LongoActions

Related issues 1 (0 open — 1 closed)

Related to Suricata - Security #8979: dnp3: link-layer events before first transaction are droppedClosedJason IshActions
Actions
Copy link

Also available in: PDF Atom