0000648: snort "(ftp_telnet) FTP command parameters were malformed" fills my entire log - MantisBT

Mantis Bug Tracker

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

ID

Project

Category

View Status

Date Submitted

Last Update

0000648

IPFire 2.7

RC-1

public

2010-06-14 16:01

2010-08-06 10:29

Reporter

Wired_Life

Assigned To

Maniacikarus

Priority

normal

Severity

tweak

Reproducibility

have not tried

Status

closed

Resolution

fixed

Platform

OS

OS Version

Product Version

Core38

Target Version

Fixed in Version

Summary

0000648: snort "(ftp_telnet) FTP command parameters were malformed" fills my entire log

Description

(ftp_telnet) FTP command parameters were malformed
fills my entire log :( where i can disable it?

Tags

No tags attached.

Relationships

Notes
(0002029) Maniacikarus (administrator) 2010-06-14 16:15	They are from the ftp preprocessor which you can adjust in the snort.conf.

(0002032) Wired_Life (reporter) 2010-06-14 17:33	can you give me a hint wich line it is? its 190? what i have to comment out?

(0002036) Maniacikarus (administrator) 2010-06-14 18:31	Yes try to comment out line 190, if this does not fix, try to comment out all lines till preprocessor smtp

(0002052) Wired_Life (reporter) 2010-06-16 14:41	snort will not start if i only comment out line 190 now i commented line 190-227 out and snort starts thanks

(0002088) Wired_Life (reporter) 2010-06-19 18:08	have you fixed this false detections in rc3? i have no more false detections in ids log after ftp connect

(0002090) Maniacikarus (administrator) 2010-06-20 09:29	We´ve changed some flags ins snort config, but the preprocessor was unchanged afaik

(0002112) Maniacikarus (administrator) 2010-06-21 20:20	Seems to be solved by the latest fixes

Issue History
Date Modified	Username	Field	Change
2010-06-14 16:01	Wired_Life	New Issue
2010-06-14 16:15	Maniacikarus	Note Added: 0002029
2010-06-14 17:33	Wired_Life	Note Added: 0002032
2010-06-14 18:31	Maniacikarus	Note Added: 0002036
2010-06-14 18:31	Maniacikarus	Severity	minor => tweak
2010-06-14 18:31	Maniacikarus	Status	new => feedback
2010-06-16 14:41	Wired_Life	Note Added: 0002052
2010-06-16 14:41	Wired_Life	Status	feedback => new
2010-06-17 11:21	Maniacikarus	Reproducibility	always => have not tried
2010-06-17 11:21	Maniacikarus	Status	new => feedback
2010-06-17 11:21	Maniacikarus	Product Version	=> Core38
2010-06-19 18:08	Wired_Life	Note Added: 0002088
2010-06-19 18:08	Wired_Life	Status	feedback => new
2010-06-20 09:29	Maniacikarus	Note Added: 0002090
2010-06-21 20:20	Maniacikarus	Note Added: 0002112
2010-06-21 20:20	Maniacikarus	Status	new => resolved
2010-06-21 20:20	Maniacikarus	Resolution	open => fixed
2010-06-21 20:20	Maniacikarus	Assigned To	=> Maniacikarus
2010-08-06 10:29	Maniacikarus	Status	resolved => closed

Copyright © 2000 - 2010 MantisBT Group