Project

General

Profile

Actions

Bug #5038

closed

tftp: tftp rules failed to load

Added by Jason Ish over 2 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

A simple rule such as alert tftp any any -> any any (msg:"test"; sid:10008; rev:1;) fails to load with the following error:

[ERRCODE: SC_ERR_UNKNOWN_PROTOCOL(124)] - protocol "tftp" cannot be used in a signature. Either detection for this protocol is not yet supported OR detection has been disabled for protocol through the yaml option app-layer.protocols.tftp.detection-enabled

This appears to have been broken with this commit in the master-6.0.x branch, https://github.com/OISF/suricata/commit/9daa22a021863508d497033939a353b61606de8a, and has been fixed in master with https://github.com/OISF/suricata/commit/c9d664b0a0d8e000aa3846e63b2f93b19302161b which cleanly cherry-picks into master-6.0.x.


Related issues 1 (1 open0 closed)

Related to Suricata - Task #5052: unittest: create test for checking all app_proto registrationsNewOISF DevActions
Actions #1

Updated by Jason Ish over 2 years ago

  • Description updated (diff)
Actions #2

Updated by Victor Julien over 2 years ago

  • Status changed from New to Assigned
  • Assignee set to Shivani Bhardwaj
  • Priority changed from Normal to High
Actions #4

Updated by Victor Julien over 2 years ago

  • Related to Task #5052: unittest: create test for checking all app_proto registrations added
Actions #5

Updated by Victor Julien over 2 years ago

  • Status changed from Assigned to In Progress
  • Assignee changed from Shivani Bhardwaj to Victor Julien
Actions #6

Updated by Victor Julien over 2 years ago

  • Status changed from In Progress to Resolved
  • Priority changed from High to Normal

Fix staged.

Actions #8

Updated by Shivani Bhardwaj over 2 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF