<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=gb2312">
<META content="MSHTML 6.00.2900.5945" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi, Victor</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2> I am writing some testing code for suricata
with clamav and I got a error log when GET a .exe file by wget or curl, it
</FONT></DIV>
<DIV><FONT face=Arial size=2>won't occour when using IE to GET a .exe file.
using tcpdump and found the log will be trigger when the first chunk packet
</FONT></DIV>
<DIV><FONT face=Arial size=2>arrive. bug?<BR> error log just like this,
<BR>(app-layer-parser.c:943) <Error> (AppLayerParse) -- [ERRCODE:
SC_ERR_ALPARSER(59)] - Error occured in parsing "http" app </FONT></DIV>
<DIV><FONT face=Arial size=2>layer protocol, using network protocol 6, source IP
address 192.168.88.108, destination IP address 192.168.88.1, src port
</FONT></DIV>
<DIV><FONT face=Arial size=2>36047 and dst port 80</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>//ZhouLi</FONT></DIV>
<BR>
____ KILL Mail Shield Gateway scanned ____<BR>
</BODY></HTML>