Actions
Bug #5492
openApplayer Detect protocol only one direction - Kerberos
Affected Versions:
Effort:
Difficulty:
Label:
Description
Some kerberos traffic between a Synology NAS and a Windows Active directory controller generates the following alert:
[**] [1:324000010:1] SURICATA Applayer Detect protocol only one direction (non-SMTP) [**] [Classification: Generic Protocol Command Decode] [Priority: 3] {TCP}
I can reproduce it with the attached pcap file.
Files
Actions