HTTP protocol error field parsing

The suricata command code is as follows:

http pcap package details:

eve log output: (An error occurred in the http protocol field)

Eve-log related configuration is as follows(Only alert configuration):

pcap file:
echo可疑命令执行#19.pcap (1.5 KB)

I think this issue is related

1 Like

This is indeed a known problem already tracked in the mentioned issue