<div dir="ltr">Thanks for getting back to me, I did open a ticket and attached the 2 captures of the smallest size that show the issue. Thanks again.</div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Jul 8, 2018 at 6:44 PM, Peter Manev <span dir="ltr"><<a href="mailto:petermanev@gmail.com" target="_blank">petermanev@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=""><br>
<br>
> On 9 Jul 2018, at 01:26, Carl Rotenan <<a href="mailto:carlrotenan@gmail.com">carlrotenan@gmail.com</a>> wrote:<br>
> <br>
> Hello.<br>
> <br>
> Am I correct that FTP file extraction isn't available in the stable only dev right now?<br>
> <br>
<br>
</span>Yes<br>
<span class=""><br>
> In the dev version, are both active and passive FTP file extraction supported? I'm only able to get passive working for some reason.<br>
> <br>
<br>
</span>Yes I stumbled upon a similar issue. Can you please open a ticket on our redmine and if possible share a pcap (privately if you wish) with detailed steps reproducing the case? (Ex rule use etc..)<br>
<br>
<br>
> Thanks!<br>
> ______________________________<wbr>_________________<br>
> Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org">oisf-users@<wbr>openinfosecfoundation.org</a><br>
> Site: <a href="http://suricata-ids.org" rel="noreferrer" target="_blank">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/" rel="noreferrer" target="_blank">http://suricata-ids.org/<wbr>support/</a><br>
> List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" rel="noreferrer" target="_blank">https://lists.<wbr>openinfosecfoundation.org/<wbr>mailman/listinfo/oisf-users</a><br>
> <br>
> Conference: <a href="https://suricon.net" rel="noreferrer" target="_blank">https://suricon.net</a><br>
> Trainings: <a href="https://suricata-ids.org/training/" rel="noreferrer" target="_blank">https://suricata-ids.org/<wbr>training/</a><br>
</blockquote></div><br></div>