Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The iis exchange parsing for IPv6 fails to work correctly #31547

Closed
ishleenk17 opened this issue May 7, 2022 · 1 comment · Fixed by elastic/integrations#3315
Closed

The iis exchange parsing for IPv6 fails to work correctly #31547

ishleenk17 opened this issue May 7, 2022 · 1 comment · Fixed by elastic/integrations#3315
Assignees
Labels
Team:Service-Integrations Label for the Service Integrations team

Comments

@ishleenk17
Copy link
Contributor

For IPv6 as the source and destination address the access log parsing fails to happen correctly.
Below are some of the successful and failure testcases. The issue is seen in both beats and integrations

Successful Scenario

2022-03-13 02:04:11 10.44.0.136 GET /pbserver/..Áœ..Áœ..Áœ..Áœ..Áœ../winnt/system32/cmd.exe /c+dir+c:+/OG 8080 - 10.44.0.136 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.1;+Trident/4.0) - 200 0 0 12 216.160.83.61,81.2.69.193

Failure Scenarios

2022-03-13 02:04:11 fe81::63ae:94c0:196e:8adf%3 GET /pbserver/..Áœ..Áœ..Áœ..Áœ..Áœ../winnt/system32/cmd.exe /c+dir+c:+/OG 8080 - fe81::63ae:94c0:196e:8adf%3 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.1;+Trident/4.0) - 200 0 0 12 81.2.69.143,81.2.69.144

2022-03-13 02:04:11 fe81::63ae:94c0:196e:8adf%3 GET /pbserver/..Áœ..Áœ..Áœ..Áœ..Áœ../winnt/system32/cmd.exe /c+dir+c:+/OG 8080 - fe81::63ae:94c0:196e:8adf%3 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.1;+Trident/4.0) - 200 0 0 12 67.43.156.15

Pipeline Test Results:

Run pipeline tests for the package
--- Test results for package: iis - START ---
FAILURE DETAILS:
iis/access test-iis-access-72.log:
[0] unexpected pipeline error: For input string: "67.43"
[1] unexpected pipeline error: For input string: "81.2"

@ishleenk17 ishleenk17 added the Team:Service-Integrations Label for the Service Integrations team label May 7, 2022
@ishleenk17 ishleenk17 self-assigned this May 7, 2022
@ishleenk17
Copy link
Contributor Author

2022-03-13 02:04:11 fe81::63ae:94c0:196e:8adf%3 GET /pbserver/..Áœ..Áœ..Áœ..Áœ..Áœ../winnt/system32/cmd.exe /c+dir+c:+/OG 8080 - fe81::63ae:94c0:196e:8adf%3 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.1;+Trident/4.0) - 200 0 0 12

This log doesn't give error. Here source and destination are IPv6, but there are no IP's towards the end of the logs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Team:Service-Integrations Label for the Service Integrations team
Projects
None yet
1 participant