[Oisf-devel] suricata app-layer-htp response Zero-length data chunks maybe a error?

[rmkml]

thx Victor for reply and support,
I Opened ticket number 133.
Regards
Rmkml


On Wed, 28 Apr 2010, Victor Julien wrote:

> Hi Rmkml, it appears this is a bug on our side. We're looking into it.
> Feel free to open up a ticket.
>
> Cheers,
> Victor
>
> rmkml wrote:
>> Hi,
>> I have downloaded last suricata git version (v0.8.2 release have same
>> pb), and I have this error with joigned pcap file:
>>  [25537] 28/4/2010 -- 13:14:28 - (app-layer-htp.c:406) <Error>
>> (HTPHandleResponseData) -- [ERRCODE: SC_ERR_ALPARSER(56)] - Error in
>> parsing HTTP server response: [1] [htp_response.c] [733] Zero-length
>> data chunks are not allowed
>>  [25537] 28/4/2010 -- 13:14:28 - (app-layer-parser.c:831) <Error>
>> (AppLayerParse) -- [ERRCODE: SC_ERR_ALPARSER(56)] - Error occured in
>> parsing "http" app layer protocol, using network protocol 6, source IP
>> address 10.50.1.208, destination IP address 199.7.71.72, src port 51173
>> and dst port 80
>> If anyone have a idea please?
>> Joigned pcap file (not fuzing, it's a real/live trafic) contains https
>> connection to ocsp_verisign since firefox browser.
>> If you confirm pb, I create a new ticket on redmine.
>> Regards
>> Rmkml