Actions
Bug #7256
closedja3: Error: ja3: Buffer should not be NULL
Affected Versions:
Effort:
Difficulty:
Label:
Description
==> /var/log/messages <== Sep 17 13:55:26 suricata[38083]: Error: ja3: Buffer should not be NULL [Ja3BufferAddValue:util-ja3.c:175] Sep 17 13:55:26 suricata[38083]: Error: ja3: Buffer should not be NULL [Ja3BufferAddValue:util-ja3.c:175] Sep 17 13:55:26 suricata[38083]: Error: ja3: Buffer should not be NULL [Ja3BufferAddValue:util-ja3.c:175] Sep 17 13:55:27 suricata[38083]: Error: ja3: Buffer should not be NULL [Ja3BufferAddValue:util-ja3.c:175] ==> /var/log/suricata/suricata.log <== [38359 - W#11-84:00.0] 2024-09-17 13:55:27 Error: ja3: Buffer should not be NULL [38324 - W#08-10:00.0] 2024-09-17 13:55:27 Error: ja3: Buffer should not be NULL ~]# suricatasc -c version {"message": "8.0.0-dev (d3eb6569d 2024-09-12)", "return": "OK"} ~]# lsb_release -a LSB Version: :core-4.1-amd64:core-4.1-noarch:cxx-4.1-amd64:cxx-4.1-noarch:desktop-4.1-amd64:desktop-4.1-noarch:languages-4.1-amd64:languages-4.1-noarch:printing-4.1-amd64:printing-4.1-noarch Distributor ID: RedHatEnterprise Description: Red Hat Enterprise Linux release 8.10 (Ootpa) Release: 8.10 Codename: Ootpa ~]# uname -a Linux 4.18.0-553.16.1.el8_10.x86_64 #1 SMP Thu Aug 1 04:16:12 EDT 2024 x86_64 x86_64 x86_64 GNU/Linux ~]# dpdk-proc-info -v EAL: RTE Version: 'DPDK 24.07.0'
Updated by Juliana Fajardini Reichow about 1 month ago
I think that https://github.com/OISF/suricata/pull/11813 fixes this, doesn't it?
Updated by Victor Julien about 1 month ago
- Subject changed from Error: ja3: Buffer should not be NULL to ja3: Error: ja3: Buffer should not be NULL
- Status changed from New to Resolved
- Target version changed from TBD to 8.0.0-beta1
- Label Needs backport to 7.0 added
Updated by OISF Ticketbot about 1 month ago
- Label deleted (
Needs backport to 7.0)
Updated by Juliana Fajardini Reichow about 1 month ago
- Assignee changed from OISF Dev to Philippe Antoine
Assigning to Philippe as he was the PR author.
Updated by OISF Ticketbot about 1 month ago
- Label deleted (
Needs backport to 7.0)
Updated by Philippe Antoine about 1 month ago
- Related to Bug #6634: tls: Invalid ja3 due to double client hello added
Updated by Andre ten Bohmer about 1 month ago
- suricatasc -c version {"message": "8.0.0-dev (45eb7e488 2024-09-24)", "return": "OK"}
Problem seems to be resolved, great, thanks!
Updated by Victor Julien about 1 month ago
- Status changed from Resolved to Closed
Actions