Project

General

Profile

Actions
Copy link

Feature #2513

open
MS CT

Task #4122: tracking: handle various TLS decrypt headers in proxies and decryption tools

sslproxy: handle HTTP header

Feature #2513: sslproxy: handle HTTP header

Added by Marco Silva almost 8 years ago. Updated 7 months ago.

Status:
Feedback
Priority:
Normal
Assignee:
Community Ticket
Target version:
TBD
Effort:
medium
Difficulty:
medium
Label:

Description

Hello. is it possible to implement in the suricata for it to read the SSLProxy header to get the source and destination correctly?

UTMFW supports the deep SSL inspection of HTTP, POP3, and SMTP protocols. SSL / TLS encrypted traffic is decrypted by SSLproxy and fed into the UTM services: Web Filter, HTTP Proxy, POP3 Proxy, SMTP Proxy, Virus Scanner, Spam Filter, and Inline IPS.

https://github.com/sonertari/SSLproxy

https://github.com/sonertari/UTMFW

Files

Download all files
log.pcap (11.1 KB) log.pcap pcap SSLproxy header Marco Silva, 03/07/2019 09:05 PM
log3.pcap (24.7 KB) log3.pcap pcap SSLproxy header Marco Silva, 03/07/2019 09:05 PM
log4.pcap (14.9 KB) log4.pcap pcap SSLproxy header Marco Silva, 03/07/2019 09:05 PM

Related issues 1 (1 open — 0 closed)

Related to Suricata - Feature #4965: protocol: SOCKS supportAssignedVictor JulienActions
Actions
Copy link

Also available in: PDF Atom