[Oisf-devel] no APP_LAYER_PARSER_DONE for HTTP protocol?
ZhouLi
zhou.li at ca-jc.com
Sat Apr 16 03:50:07 UTC 2011
Hi, Victor
I am writing some testing code for suricata with clamav and I got a error log when GET a .exe file by wget or curl, it
won't occour when using IE to GET a .exe file. using tcpdump and found the log will be trigger when the first chunk packet
arrive. bug?
error log just like this,
(app-layer-parser.c:943) <Error> (AppLayerParse) -- [ERRCODE: SC_ERR_ALPARSER(59)] - Error occured in parsing "http" app
layer protocol, using network protocol 6, source IP address 192.168.88.108, destination IP address 192.168.88.1, src port
36047 and dst port 80
//ZhouLi
____ KILL Mail Shield Gateway scanned ____
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-devel/attachments/20110416/12243d9c/attachment-0002.html>
More information about the Oisf-devel
mailing list