# AppLayer: NFSv4 Parser bug, OpenRequestContent should add EXCLUSIVE4\_1

**URL:** <https://forum.suricata.io/t/applayer-nfsv4-parser-bug-openrequestcontent-should-add-exclusive4-1/6068>\
**Category:** Developers\
**Tags:** suricata\
**Created:** [October 20, 2025, 4:40am UTC](https://forum.suricata.io/t/applayer-nfsv4-parser-bug-openrequestcontent-should-add-exclusive4-1/6068 "2025-10-20T04:40:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![QianKaiLin](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/qiankailin/32/3605_2.png) [@QianKaiLin](https://forum.suricata.io/u/QianKaiLin)\
**Post date:** [October 20, 2025, 4:40am UTC](https://forum.suricata.io/t/applayer-nfsv4-parser-bug-openrequestcontent-should-add-exclusive4-1/6068/1 "2025-10-20T04:40:49Z")

</div>

Please refer to the [rfc](https://datatracker.ietf.org/doc/rfc5661/)

---

<div class="post-metadata">

**Author:** ![Philippe\_Antoine](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/philippe_antoine/32/799_2.png) [@Philippe\_Antoine](https://forum.suricata.io/u/Philippe_Antoine)\
**Post date:** [October 26, 2025, 7:21pm UTC](https://forum.suricata.io/t/applayer-nfsv4-parser-bug-openrequestcontent-should-add-exclusive4-1/6068/2 "2025-10-26T19:21:20Z")

</div>

Would you have a pcap to show the different/buggy behavior ?

---

<div class="post-metadata">

**Author:** ![jufajardini](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/jufajardini/32/896_2.png) [@jufajardini](https://forum.suricata.io/u/jufajardini)\
**Post date:** [October 28, 2025, 6:44pm UTC](https://forum.suricata.io/t/applayer-nfsv4-parser-bug-openrequestcontent-should-add-exclusive4-1/6068/3 "2025-10-28T18:44:44Z")

</div>

I think they were shared here: [Feature #8006: nfs: NFSv4 should support 4.1's new enums - Suricata - Open Information Security Foundation](https://redmine.openinfosecfoundation.org/issues/8006)