oot@OpenWrt:/etc/suricata# suricata -vvvv -c suricata.yaml -s rules/files.rules -i eth0 Error opening file /var/log/suricata/suricata.log [2482] 5/9/2020 -- 08:09:03 - (util-debug.c:1488) (SCLogLoadConfig) -- sc_log_global_log_level: 10 [2482] 5/9/2020 -- 08:09:03 - (util-debug.c:1489) (SCLogLoadConfig) -- sc_lc->log_format: [%i] %t - (%f:%l) <%d> (%n) -- [2482] 5/9/2020 -- 08:09:03 - (util-debug.c:1490) (SCLogLoadConfig) -- SCLogSetOPFilter: filter: (null) [2482] 5/9/2020 -- 08:09:03 - (suricata.c:1065) (LogVersion) -- This is Suricata version 6.0.0-dev running in SYSTEM mode [2482] 5/9/2020 -- 08:09:03 - (util-cpu.c:174) (UtilCpuPrintSummary) -- CPUs Summary: [2482] 5/9/2020 -- 08:09:03 - (util-cpu.c:176) (UtilCpuPrintSummary) -- CPUs configured: 2 [2482] 5/9/2020 -- 08:09:03 - (util-cpu.c:178) (UtilCpuPrintSummary) -- CPUs/cores online: 2 [2482] 5/9/2020 -- 08:09:03 - (suricata.c:918) (ParseInterfacesList) -- Entering ... >> [2482] 5/9/2020 -- 08:09:03 - (suricata.c:983) (ParseInterfacesList) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:03 - (conf.c:371) (ConfGetValue) -- failed to lookup configuration parameter 'capture.disable-offloading' [2482] 5/9/2020 -- 08:09:03 - (conf.c:371) (ConfGetValue) -- failed to lookup configuration parameter 'capture.checksum-validation' [2482] 5/9/2020 -- 08:09:03 - (app-layer.c:807) (AppLayerSetup) -- Entering ... >> [2482] 5/9/2020 -- 08:09:03 - (app-layer-detect-proto.c:1767) (AppLayerProtoDetectSetup) -- Entering ... >> [2482] 5/9/2020 -- 08:09:03 - (util-mpm-ac.c:907) (SCACInitCtx) -- Returning ... << [2482] 5/9/2020 -- 08:09:03 - (util-mpm-ac.c:907) (SCACInitCtx) -- Returning ... << [2482] 5/9/2020 -- 08:09:03 - (util-mpm-ac.c:907) (SCACInitCtx) -- Returning ... << [2482] 5/9/2020 -- 08:09:03 - (util-mpm-ac.c:907) (SCACInitCtx) -- Returning ... << [2482] 5/9/2020 -- 08:09:03 - (util-mpm-ac.c:907) (SCACInitCtx) -- Returning ... << [2482] 5/9/2020 -- 08:09:03 - (util-mpm-ac.c:907) (SCACInitCtx) -- Returning ... << [2482] 5/9/2020 -- 08:09:03 - (app-layer-detect-proto.c:1789) (AppLayerProtoDetectSetup) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:03 - (app-layer-parser.c:220) (AppLayerParserSetup) -- Entering ... >> [2482] 5/9/2020 -- 08:09:03 - (app-layer-parser.c:222) (AppLayerParserSetup) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:03 - (app-layer-parser.c:1554) (AppLayerParserRegisterProtocolParsers) -- Entering ... >> [2482] 5/9/2020 -- 08:09:03 - (app-layer-htp.c:3055) (RegisterHTPParsers) -- Entering ... >> [2482] 5/9/2020 -- 08:09:03 - (app-layer-detect-proto.c:1892) (AppLayerProtoDetectConfProtoDetectionEnabled) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1947) (AppLayerProtoDetectConfProtoDetectionEnabled) -- Returning: 1 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1827) (AppLayerProtoDetectRegisterProtocol) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1832) (AppLayerProtoDetectRegisterProtocol) -- Returning ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (detect-content.c:96) (DetectContentDataParse) -- "GET|20|", len 7 [2482] 5/9/2020 -- 08:09:04 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (detect-content.c:96) (DetectContentDataParse) -- "GET|09|", len 7 [2482] 5/9/2020 -- 08:09:04 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (detect-content.c:96) (DetectContentDataParse) -- "PUT|20|", len 7 [2482] 5/9/2020 -- 08:09:04 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (detect-content.c:96) (DetectContentDataParse) -- "PUT|09|", len 7 [2482] 5/9/2020 -- 08:09:04 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (detect-content.c:96) (DetectContentDataParse) -- "POST|20|", len 8 [2482] 5/9/2020 -- 08:09:04 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (detect-content.c:96) (DetectContentDataParse) -- "POST|09|", len 8 [2482] 5/9/2020 -- 08:09:04 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (detect-content.c:96) (DetectContentDataParse) -- "HEAD|20|", len 8 [2482] 5/9/2020 -- 08:09:04 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:04 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (detect-content.c:96) (DetectContentDataParse) -- "HEAD|09|", len 8 [2482] 5/9/2020 -- 08:09:05 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (detect-content.c:96) (DetectContentDataParse) -- "TRACE|20|", len 9 [2482] 5/9/2020 -- 08:09:05 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (detect-content.c:96) (DetectContentDataParse) -- "TRACE|09|", len 9 [2482] 5/9/2020 -- 08:09:05 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (detect-content.c:96) (DetectContentDataParse) -- "OPTIONS|20|", len 11 [2482] 5/9/2020 -- 08:09:05 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (detect-content.c:96) (DetectContentDataParse) -- "OPTIONS|09|", len 11 [2482] 5/9/2020 -- 08:09:05 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (detect-content.c:96) (DetectContentDataParse) -- "CONNECT|20|", len 11 [2482] 5/9/2020 -- 08:09:05 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (detect-content.c:96) (DetectContentDataParse) -- "CONNECT|09|", len 11 [2482] 5/9/2020 -- 08:09:05 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:05 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (detect-content.c:96) (DetectContentDataParse) -- "DELETE|20|", len 10 [2482] 5/9/2020 -- 08:09:06 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (detect-content.c:96) (DetectContentDataParse) -- "DELETE|09|", len 10 [2482] 5/9/2020 -- 08:09:06 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (detect-content.c:96) (DetectContentDataParse) -- "PATCH|20|", len 9 [2482] 5/9/2020 -- 08:09:06 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (detect-content.c:96) (DetectContentDataParse) -- "PATCH|09|", len 9 [2482] 5/9/2020 -- 08:09:06 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (detect-content.c:96) (DetectContentDataParse) -- "PROPFIND|20|", len 12 [2482] 5/9/2020 -- 08:09:06 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (detect-content.c:96) (DetectContentDataParse) -- "PROPFIND|09|", len 12 [2482] 5/9/2020 -- 08:09:06 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (detect-content.c:96) (DetectContentDataParse) -- "PROPPATCH|20|", len 13 [2482] 5/9/2020 -- 08:09:06 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:06 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (detect-content.c:96) (DetectContentDataParse) -- "PROPPATCH|09|", len 13 [2482] 5/9/2020 -- 08:09:07 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (detect-content.c:96) (DetectContentDataParse) -- "MKCOL|20|", len 9 [2482] 5/9/2020 -- 08:09:07 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (detect-content.c:96) (DetectContentDataParse) -- "MKCOL|09|", len 9 [2482] 5/9/2020 -- 08:09:07 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (detect-content.c:96) (DetectContentDataParse) -- "COPY|20|", len 8 [2482] 5/9/2020 -- 08:09:07 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (detect-content.c:96) (DetectContentDataParse) -- "COPY|09|", len 8 [2482] 5/9/2020 -- 08:09:07 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:07 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (detect-content.c:96) (DetectContentDataParse) -- "MOVE|20|", len 8 [2482] 5/9/2020 -- 08:09:08 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (detect-content.c:96) (DetectContentDataParse) -- "MOVE|09|", len 8 [2482] 5/9/2020 -- 08:09:08 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (detect-content.c:96) (DetectContentDataParse) -- "LOCK|20|", len 8 [2482] 5/9/2020 -- 08:09:08 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (detect-content.c:96) (DetectContentDataParse) -- "LOCK|09|", len 8 [2482] 5/9/2020 -- 08:09:08 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (detect-content.c:96) (DetectContentDataParse) -- "UNLOCK|20|", len 10 [2482] 5/9/2020 -- 08:09:08 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (detect-content.c:96) (DetectContentDataParse) -- "UNLOCK|09|", len 10 [2482] 5/9/2020 -- 08:09:08 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (detect-content.c:96) (DetectContentDataParse) -- "CHECKOUT|20|", len 12 [2482] 5/9/2020 -- 08:09:08 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:08 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (detect-content.c:96) (DetectContentDataParse) -- "CHECKOUT|09|", len 12 [2482] 5/9/2020 -- 08:09:09 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (detect-content.c:96) (DetectContentDataParse) -- "UNCHECKOUT|20|", len 14 [2482] 5/9/2020 -- 08:09:09 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (detect-content.c:96) (DetectContentDataParse) -- "UNCHECKOUT|09|", len 14 [2482] 5/9/2020 -- 08:09:09 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (detect-content.c:96) (DetectContentDataParse) -- "CHECKIN|20|", len 11 [2482] 5/9/2020 -- 08:09:09 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (detect-content.c:96) (DetectContentDataParse) -- "CHECKIN|09|", len 11 [2482] 5/9/2020 -- 08:09:09 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (detect-content.c:96) (DetectContentDataParse) -- "UPDATE|20|", len 10 [2482] 5/9/2020 -- 08:09:09 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (detect-content.c:96) (DetectContentDataParse) -- "UPDATE|09|", len 10 [2482] 5/9/2020 -- 08:09:09 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:09 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (detect-content.c:96) (DetectContentDataParse) -- "LABEL|20|", len 9 [2482] 5/9/2020 -- 08:09:10 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (detect-content.c:96) (DetectContentDataParse) -- "LABEL|09|", len 9 [2482] 5/9/2020 -- 08:09:10 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (detect-content.c:96) (DetectContentDataParse) -- "REPORT|20|", len 10 [2482] 5/9/2020 -- 08:09:10 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (detect-content.c:96) (DetectContentDataParse) -- "REPORT|09|", len 10 [2482] 5/9/2020 -- 08:09:10 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (detect-content.c:96) (DetectContentDataParse) -- "MKWORKSPACE|20|", len 15 [2482] 5/9/2020 -- 08:09:10 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (detect-content.c:96) (DetectContentDataParse) -- "MKWORKSPACE|09|", len 15 [2482] 5/9/2020 -- 08:09:10 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (detect-content.c:96) (DetectContentDataParse) -- "MKACTIVITY|20|", len 14 [2482] 5/9/2020 -- 08:09:10 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:10 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (detect-content.c:96) (DetectContentDataParse) -- "MKACTIVITY|09|", len 14 [2482] 5/9/2020 -- 08:09:11 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (detect-content.c:96) (DetectContentDataParse) -- "MERGE|20|", len 9 [2482] 5/9/2020 -- 08:09:11 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (detect-content.c:96) (DetectContentDataParse) -- "MERGE|09|", len 9 [2482] 5/9/2020 -- 08:09:11 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (detect-content.c:96) (DetectContentDataParse) -- "INVALID|20|", len 11 [2482] 5/9/2020 -- 08:09:11 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (detect-content.c:96) (DetectContentDataParse) -- "INVALID|09|", len 11 [2482] 5/9/2020 -- 08:09:11 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (detect-content.c:96) (DetectContentDataParse) -- "VERSION-CONTROL|20|", len 19 [2482] 5/9/2020 -- 08:09:11 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (detect-content.c:96) (DetectContentDataParse) -- "VERSION-CONTROL|09|", len 19 [2482] 5/9/2020 -- 08:09:11 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:11 - (detect-content.c:96) (DetectContentDataParse) -- "BASELINE-CONTROL|20|", len 20 [2482] 5/9/2020 -- 08:09:12 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (detect-content.c:96) (DetectContentDataParse) -- "BASELINE-CONTROL|09|", len 20 [2482] 5/9/2020 -- 08:09:12 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (detect-content.c:96) (DetectContentDataParse) -- "HTTP/0.9", len 8 [2482] 5/9/2020 -- 08:09:12 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (detect-content.c:96) (DetectContentDataParse) -- "HTTP/1.0", len 8 [2482] 5/9/2020 -- 08:09:12 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1755) (AppLayerProtoDetectPMRegisterPatternCI) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1446) (AppLayerProtoDetectPMRegisterPattern) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (detect-content.c:96) (DetectContentDataParse) -- "HTTP/1.1", len 8 [2482] 5/9/2020 -- 08:09:12 - (util-spm-bm.c:122) (BoyerMooreCtxDeInit) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (util-spm-bm.c:128) (BoyerMooreCtxDeInit) -- Returning ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1418) (AppLayerProtoDetectPMAddSignature) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1435) (AppLayerProtoDetectPMAddSignature) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1490) (AppLayerProtoDetectPMRegisterPattern) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-detect-proto.c:1760) (AppLayerProtoDetectPMRegisterPatternCI) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:304) (AppLayerParserConfParserEnabled) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:354) (AppLayerParserConfParserEnabled) -- Returning: 1 ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:402) (AppLayerParserRegisterStateFuncs) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:409) (AppLayerParserRegisterStateFuncs) -- Returning ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:490) (AppLayerParserRegisterTxFreeFunc) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:495) (AppLayerParserRegisterTxFreeFunc) -- Returning ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:429) (AppLayerParserRegisterGetFilesFunc) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:434) (AppLayerParserRegisterGetFilesFunc) -- Returning ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:479) (AppLayerParserRegisterGetStateProgressFunc) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:484) (AppLayerParserRegisterGetStateProgressFunc) -- Returning ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:501) (AppLayerParserRegisterGetTxCnt) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:506) (AppLayerParserRegisterGetTxCnt) -- Returning ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:512) (AppLayerParserRegisterGetTx) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:517) (AppLayerParserRegisterGetTx) -- Returning ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:531) (AppLayerParserRegisterGetStateProgressCompletionStatus) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:536) (AppLayerParserRegisterGetStateProgressCompletionStatus) -- Returning ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:440) (AppLayerParserRegisterGetEventsFunc) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:445) (AppLayerParserRegisterGetEventsFunc) -- Returning ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:555) (AppLayerParserRegisterGetEventInfo) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:560) (AppLayerParserRegisterGetEventInfo) -- Returning ... << [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:543) (AppLayerParserRegisterGetEventInfoById) -- Entering ... >> [2482] 5/9/2020 -- 08:09:12 - (app-layer-parser.c:548) (AppLayerParserRegisterGetEventInfoById) -- Returning ... << [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:469) (AppLayerParserRegisterTruncateFunc) -- Entering ... >> [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:473) (AppLayerParserRegisterTruncateFunc) -- Returning ... << [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:567) (AppLayerParserRegisterDetectStateFuncs) -- Entering ... >> [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:572) (AppLayerParserRegisterDetectStateFuncs) -- Returning ... << [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:578) (AppLayerParserRegisterTxDataFunc) -- Entering ... >> [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:582) (AppLayerParserRegisterTxDataFunc) -- Returning ... << [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:598) (AppLayerParserRegisterSetStreamDepthFlag) -- Entering ... >> [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:602) (AppLayerParserRegisterSetStreamDepthFlag) -- Returning ... << [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:363) (AppLayerParserRegisterParser) -- Entering ... >> [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:368) (AppLayerParserRegisterParser) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:363) (AppLayerParserRegisterParser) -- Entering ... >> [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:368) (AppLayerParserRegisterParser) -- Returning: 0 ... << [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:385) (AppLayerParserRegisterOptionFlags) -- Entering ... >> [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:389) (AppLayerParserRegisterOptionFlags) -- Returning ... << [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:374) (AppLayerParserRegisterParserAcceptableDataDirection) -- Entering ... >> [2482] 5/9/2020 -- 08:09:13 - (app-layer-parser.c:379) (AppLayerParserRegisterParserAcceptableDataDirection) -- Returning ... << [2482] 5/9/2020 -- 08:09:13 - (app-layer-htp.c:2798) (HTPConfigure) -- Entering ... >> [2482] 5/9/2020 -- 08:09:13 - (app-layer-htp.c:2811) (HTPConfigure) -- LIBHTP default config: 0xaac6bc68c0 [2482] 5/9/2020 -- 08:09:13 - (app-layer-htp.c:2502) (HTPConfigParseParameters) -- LIBHTP default: personality = IDS [2482] 5/9/2020 -- 08:09:13 - (app-layer-htp.c:2503) (HTPConfigParseParameters) -- LIBHTP default: personality = IDS [2482] 5/9/2020 -- 08:09:13 - (app-layer-htp.c:2506) (HTPConfigParseParameters) -- LIBHTP default: personality=IDS (2) [2482] 5/9/2020 -- 08:09:13 - (app-layer-htp.c:2512) (HTPConfigParseParameters) -- LIBHTP personality set to IDS Illegal instruction root@OpenWrt:/etc/suricata#