[Oisf-devel] suricata app-layer-htp response Zero-length data chunks maybe a error?

[Victor Julien]

Hi Rmkml, it appears this is a bug on our side. We're looking into it.
Feel free to open up a ticket.

Cheers,
Victor

rmkml wrote:
> Hi,
> I have downloaded last suricata git version (v0.8.2 release have same
> pb), and I have this error with joigned pcap file:
>  [25537] 28/4/2010 -- 13:14:28 - (app-layer-htp.c:406) <Error>
> (HTPHandleResponseData) -- [ERRCODE: SC_ERR_ALPARSER(56)] - Error in
> parsing HTTP server response: [1] [htp_response.c] [733] Zero-length
> data chunks are not allowed
>  [25537] 28/4/2010 -- 13:14:28 - (app-layer-parser.c:831) <Error>
> (AppLayerParse) -- [ERRCODE: SC_ERR_ALPARSER(56)] - Error occured in
> parsing "http" app layer protocol, using network protocol 6, source IP
> address 10.50.1.208, destination IP address 199.7.71.72, src port 51173
> and dst port 80
> If anyone have a idea please?
> Joigned pcap file (not fuzing, it's a real/live trafic) contains https
> connection to ocsp_verisign since firefox browser.
> If you confirm pb, I create a new ticket on redmine.
> Regards
> Rmkml
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Oisf-devel mailing list
> Oisf-devel at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel


-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------