Suricata version : Suricata 7.0.8
Operating system and/or Linux distribution : Debain 12 bookworm
How you installed Suricata : From APT
Hi, i am roockie to suricata i configured it and everything seems working fine except its not creating alerts for rules that trigger for POST request body parameters, i checked eve.json and it shows body length: 0. But suricata works perfectly with GET requset. Not sure why its not working
eve log:
{"timestamp":"2025-03-12T10:34:34.136519+0000","flow_id":204102805657068,"event_type":"fileinfo","src_ip":"redacted","src_port":54030,"dest_ip":"redacted","dest_port":80,"proto":"TCP","http":{"hostname":"redacted","url":"/bWAPP/login.php","http_user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0","http_refer":"http://10.160.22.184/bWAPP/login.php","http_method":"POST","protocol":"HTTP/1.1","length":0},"app_proto":"http","fileinfo":{"filename":"/bWAPP/login.php","sid":[],"magic":"ASCII text, with no line terminators","gaps":false,"state":"CLOSED","md5":"e5b0523131c56c50bc85200b84ae8169","sha1":"303edfd29f8e3da6cfc85a2e8819ae028eeb4f09","sha256":"a22202869a24cacaf756e8d729b565e4b858b347633d76ab4fb9e9595d0251fd","stored":false,"size":51,"tx_id":0}}