[Oisf-users] Several errors with http parser after updating to 1.1.1

carlopmart carlopmart at gmail.com
Fri Dec 16 08:30:46 EST 2011


Hi all,

  After updating my suricata 1.1 to 1.1.1, I can see several errors from 
http parser, like in this thread:

http://lists.openinfosecfoundation.org/pipermail/oisf-users/2011-December/001150.html

  My errors:

  [100066] 16/12/2011 -- 12:29:04 - (app-layer-htp.c:487) <Error> 
(HTPHandleResponseData) -- [ERRCODE: SC_ERR_ALPARSER(59)] - Error in 
parsing HTTP server response: [1] [htp_response.c] [677] Unable to ma
tch response to request
[100066] 16/12/2011 -- 12:29:04 - (app-layer-parser.c:969) <Error> 
(AppLayerParse) -- [ERRCODE: SC_ERR_ALPARSER(59)] - Error occured in 
parsing "http" app layer protocol, using network protocol 6, sourc
e IP address 172.25.50.25, destination IP address 85.214.82.144, src 
port 35859 and dst port 80
[100066] 16/12/2011 -- 13:03:38 - (app-layer-htp.c:487) <Error> 
(HTPHandleResponseData) -- [ERRCODE: SC_ERR_ALPARSER(59)] - Error in 
parsing HTTP server response: [1] [htp_response.c] [677] Unable to ma
tch response to request
[100066] 16/12/2011 -- 13:03:38 - (app-layer-parser.c:969) <Error> 
(AppLayerParse) -- [ERRCODE: SC_ERR_ALPARSER(59)] - Error occured in 
parsing "http" app layer protocol, using network protocol 6, sourc
e IP address 172.25.50.25, destination IP address 85.214.82.144, src 
port 55596 and dst port 80

  I have compiled suricata with "--enable-profiling --enable-ipfw" flags 
under FreeBSD 8.1 32bit host.

  Is this a known bug in stable version??

  Thanks.

-- 
CL Martinez
carlopmart {at} gmail {d0t} com


More information about the Oisf-users mailing list