Open Information Security Foundation

06/18/2018

01:37 PM Suricata Support #2512: http events - Weird unicode characters and truncation in some of http_method/http_user_agent fields

Hi,
Sorry for late reply.
Regarding Ubuntu 16.04, I installed suricata 4.0.4 and 4.1-beta from oisf repositorie... Gonzalez Marc

06/08/2018

03:32 PM Suricata Support #2512: http events - Weird unicode characters and truncation in some of http_method/http_user_agent fields

Futher tests made with the pcap provided:
- Suricata 4.0.4 on Ubuntu 16.04 LTS => Same problem.
- Suricata 4.1 be... Gonzalez Marc

02:47 PM Suricata Support #2512: http events - Weird unicode characters and truncation in some of http_method/http_user_agent fields

Hello,
You can find in attachment a small pcap with a problematic packet.
Offline tests made with that pcap fil... Gonzalez Marc

06/06/2018

06:19 PM Suricata Support #2512: http events - Weird unicode characters and truncation in some of http_method/http_user_agent fields

Hi,
Further test:
I installed and tested the previous version 4.0.3 (packages libhtp-0.5.25-1_4.0.3-1ubuntu2_a... Gonzalez Marc

06/05/2018

06:42 PM Suricata Support #2512 (Closed): http events - Weird unicode characters and truncation in some of http_method/http_user_agent fields

Hello,
We have recently upgraded our ids in production from suricata version 3.2.1 to version 4.0.4 via the packag... Gonzalez Marc