Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

String with embedded NUL Errors related to IRC(ish) traffic analysis #297

Closed
dwdixon opened this issue Feb 28, 2019 · 4 comments
Closed
Assignees
Labels
Area: Protocol Analysis Type: Bug 🐛 Unexpected behavior or output.

Comments

@dwdixon
Copy link

dwdixon commented Feb 28, 2019

Hi there, I've also been seeing this error for many months now, first while running master prior to the official release of 2.6.1, but after moving to running 2.6.1 release I noticed that I'm still seeing this error, it looks like the NUL maybe isn't handled properly? I'm not totally sure, even though the NUL I don't think is supposed to be there (probably not following the RFC for the IRC protocol)... is throwing this error the proper way to address/handle that?

Reporter::ERROR string with embedded NUL: "jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00BYE"     (empty)
Reporter::ERROR string with embedded NUL: "P\\x00\\x01*ACK"     (empty)
Reporter::ERROR string with embedded NUL: "P\\x00\\x01\\xaaMESSAGE"     (empty)
Reporter::ERROR string with embedded NUL: "P\\x00\\x01XMESSAGE" (empty)
Reporter::ERROR string with embedded NUL: "P\\x00\\x01oMESSAGE" (empty)
Reporter::ERROR string with embedded NUL: "P\\x00\\x01*ACK"     (empty)
Reporter::ERROR string with embedded NUL: "P\\x00\\x01*ACK"     (empty)
Reporter::ERROR string with embedded NUL: "P\\x00\\x01_INVITE"  (empty)
Reporter::ERROR string with embedded NUL: "jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00REGISTER"      (empty)
Reporter::ERROR string with embedded NUL: "jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00jaK\\x00\\x00\\x00\\x00\\x00REGISTER"      (empty)
@jsiwek jsiwek added Type: Bug 🐛 Unexpected behavior or output. Area: Protocol Analysis labels Mar 7, 2019
@jsiwek
Copy link
Contributor

jsiwek commented Mar 7, 2019

Hi, it is possibly indicating some bug or improvement that could be made, but it's hard to tell from just the error messages which code path is responsible for emitting them. It would be best if you could provide a pcap file that reproduces the errors, or, if you can't share that, give a call stack trace that pinpoints file/line information to pinpoint where those errors are generated.

@timwoj
Copy link
Contributor

timwoj commented Jul 28, 2020

@dwdixon Bringing this issue back up again, do you have a pcap that reproduces this or can we close it out for now?

@timwoj timwoj self-assigned this Jul 28, 2020
@dwdixon
Copy link
Author

dwdixon commented Jul 29, 2020

@timwoj Hi there, I'm not sure that I have enough to go on to easily narrow down getting a useful pcap to help get to the bottom of this atm. I think maybe down the line I could spend some time on trying to get a useful pcap but that wouldn't be anytime in the near future unfortunately. I'll leave it up to you all if you want to leave the issue open and we can circle back later? Alternatively, if you want to close it for now I could just re-open/open a new issue if I'm still seeing this error once I'm able to circle back to spending some time digging into this on our end. Thanks for reaching out and all you do! : )

@timwoj
Copy link
Contributor

timwoj commented Jul 31, 2020

I'll go ahead and close it for now. If you run across it again and can get a sample, feel free to reopen it.

@timwoj timwoj closed this as completed Jul 31, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Area: Protocol Analysis Type: Bug 🐛 Unexpected behavior or output.
Projects
None yet
Development

No branches or pull requests

3 participants