-
Notifications
You must be signed in to change notification settings - Fork 90
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Multipart mime 3487 v3 #1377
Multipart mime 3487 v3 #1377
Conversation
Fix manually crafted pcaps to have valid MIME headers folding beginning with space And removing the test for BODY_BOUND which is becoming obsolete
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just some minor comments, right now...
# *** Add configuration here *** | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We usually ask folks to remove this. :P
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ok.
Why is it not removed automatically ?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I imagine that that is so people have a hint that test.yaml can be used for some configuration settings, too?
@@ -0,0 +1,11 @@ | |||
# Test Description | |||
|
|||
Test some mimre processing |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is mimre a real term, or is it a typo? Couldn't find it on google...
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Oops, changing
Replaced by #1383 |
Ticket
Redmine ticket: https://redmine.openinfosecfoundation.org/issues/3487
See OISF/suricata#9424
#1371 with fixes to pcap
@inashivb do you approve ?