The suricata command code is as follows: [suricata命令执行] http pcap package details： [pcap包详情] eve log output: （An error occurred in the http protocol field） [eve日志输出] Eve-log related configuration is as follows（Only alert configuration）: [eve日志配置] pcap file: echo可疑命令执行#19.pcap (1.5 KB)

HTTP protocol error field parsing

bmurphy November 7, 2023, 1:56pm 2

I think this issue is related

1 Like