[Oisf-devel] {6} suricata htp HTPHandleResponseData Error

[rmkml]

Thx for reply Will,
Yes it is:
[10586] 4/1/2010 -- 13:54:01 - (app-layer-htp.c:220) <Error> (HTPHandleResponseData) -- [ERRCODE: SC_ALPARSER_ERR(36)] - Error in parsing HTTP server request
[10586] 4/1/2010 -- 13:54:01 - (app-layer-parser.c:823) <Error> (AppLayerParse) -- [ERRCODE: SC_ALPARSER_ERR(36)] - Error occured in parsing "http" app layer protocol, using network protocol 6, source IP address 10.253.141.46, destination IP address 216.219.118.209, src port 1058 and dst port 80
Regards
Rmkml


On Mon, 4 Jan 2010, Will Metcalf wrote:

> Can you please send the exact error you are receiving?
> Regards,
> Will
>
> On Sun, Jan 3, 2010 at 10:06 PM, rmkml <rmkml at free.fr> wrote:
>
>> Hi,
>> I have one error and one question please.
>>
>> 1) With (joigned) pcap file, I have a htp HTPHandleResponseData Error, why
>> please?
>>  I start suricata with:
>>  ./suricata080beta -c suricata.yaml -r
>> suricata_httpparsingresponseerror1.pcap
>>  I have compiled htp with debug but no more information understand why this
>> error.
>>
>> 2) On file htp-0.2.1/htp/htp_response.c, maybe change this: (req->res)
>>  int htp_connp_res_data(htp_connp_t *connp, htp_time_t timestamp, unsigned
>> char *data, size_t len) {
>>  #ifdef HTP_DEBUG
>> -    fprintf(stderr, "htp_connp_req_data(connp->out_status %x)\n",
>> connp->out_status);
>> +    fprintf(stderr, "htp_connp_res_data(connp->out_status %x)\n",
>> connp->out_status);
>>     fprint_raw_data(stderr, __FUNCTION__, data, len);
>>  #endif
>>
>> Regards
>> Rmkml
>> Crusoe-Researches.com