Project

General

Profile

Actions

Bug #2978

open

IRC traffic parsed by FTP

Added by Jeff Lucovsky over 5 years ago. Updated 7 months ago.

Status:
In Progress
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Some IRC traffic is being parsed by the FTP parser.

There is a (private) pcap that demonstrates the problem.


Related issues 3 (2 open1 closed)

Related to Suricata - Feature #273: IRC protocol detection supportNewCommunity TicketActions
Related to Suricata - Task #2757: improve protocol detectionIn ReviewPhilippe AntoineActions
Related to Suricata - Feature #1125: smtp: improve protocol detectionClosedPhilippe AntoineActions
Actions #1

Updated by Victor Julien over 5 years ago

  • Related to Feature #273: IRC protocol detection support added
Actions #2

Updated by Victor Julien over 5 years ago

  • Related to Task #2757: improve protocol detection added
Actions #3

Updated by Andreas Herz over 5 years ago

  • Assignee set to OISF Dev
  • Target version set to TBD
Actions #4

Updated by Philippe Antoine over 5 years ago

  • Related to Feature #1125: smtp: improve protocol detection added
Actions #5

Updated by Giuseppe Longo over 5 years ago

this pcap can be shared?

Actions #6

Updated by Jeff Lucovsky over 5 years ago

We are not able to share this pcap file.

Actions #7

Updated by Philippe Antoine almost 4 years ago

  • Assignee changed from OISF Dev to Philippe Antoine
Actions #10

Updated by Philippe Antoine 7 months ago

  • Status changed from New to In Progress
Actions

Also available in: Atom PDF