[Oisf-devel] FTP bounce detection broken on some platforms

Isaac Lee Isaac.Lee at alliedtelesis.co.nz
Tue Jul 3 04:59:54 UTC 2018


Hi all,

I came across an issue where FTP bounce is wrongly detected on mips64 
platforms.

The issue starts to occur after the following commit that aims to make 
IP address conversion work on PPC64:
https://github.com/OISF/suricata/commit/6783463eeeec3d46214032f0c39346a9c1a2ba37

However it does not work on mips64. The two IP addresses it's comparing 
is actually the same but in reverse order, causing false positive 
detections. Reverting the commit makes the issue go away.

Does anyone have any idea how the issue should be fixed?

Any feedback is appreciated.

Isaac



More information about the Oisf-devel mailing list