Project

General

Profile

Actions

Bug #1150

closed

TLS store disabled by TLS EVE logging

Added by Eric Leblond over 10 years ago. Updated over 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

If TLS logging is enabled in EVE then it is not possible to activate TLS logging in a text file:

[4896] 21/3/2014 -- 10:29:44 - (log-tlslog.c:406) <Error> (LogTlsLogInitCtx) -- [ERRCODE: SC_ERR_CONF_YAML_ERROR(240)] - only one 'tls' logger can be enabled

But TLS store is dependent of logging TLS to text file and the result is that it is not possible to use tls.store when TLS eve logging is enabled.

Actions #1

Updated by Victor Julien over 10 years ago

  • Priority changed from High to Normal
  • Target version set to 2.0.1rc1

Currently we support only one module as we have backward way of tracking if we have logged already or not. It's done by setting a flag in the state. As a hack, we can use 2 separate flags perhaps. Ideally, we'd fix this in a cleaner way, but that may be 2.1 material.

Actions #2

Updated by Victor Julien over 10 years ago

  • Priority changed from Normal to Low
Actions #3

Updated by Victor Julien over 10 years ago

  • Target version changed from 2.0.1rc1 to 2.0.2
Actions #4

Updated by Victor Julien over 10 years ago

  • Target version changed from 2.0.2 to 3.0RC2
Actions #5

Updated by Victor Julien over 9 years ago

  • Target version changed from 3.0RC2 to 70
Actions #6

Updated by Eric Leblond over 9 years ago

  • % Done changed from 0 to 80

Preliminary implementation is available: https://github.com/regit/suricata/tree/tls-eve-log-fix-v1.0

Actions #7

Updated by Victor Julien over 9 years ago

  • Status changed from New to Closed
  • Assignee set to Eric Leblond
  • Priority changed from Low to Normal
  • Target version changed from 70 to 3.0RC1
  • % Done changed from 80 to 100
Actions

Also available in: Atom PDF