Project

General

Profile

Actions
Copy link

Feature #2572

closed

extend protocol detection to specify flow direction

Added by Victor Julien over 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
5.0beta1
Effort:
Difficulty:
Label:

Description

In midstream and async cases, the flow direction can be wrong. It's not always possible to detect this based on the packet properties, but the protocol detection can often tell.

Implement a way to allow protocol detect to change the flow direction.

Related issues 3 (1 open — 2 closed)

Blocks Suricata - Feature #1125: smtp: improve protocol detectionClosedPhilippe AntoineActions
Blocks Suricata - Feature #273: IRC protocol detection supportNewCommunity TicketActions
Blocks Suricata - Optimization #2272: Analyze DNS response if query is not presentRejectedJason IshActions
Actions
Copy link
 #1

Updated by Victor Julien over 6 years ago

Actions
Copy link
 #2

Updated by Victor Julien over 6 years ago

Actions
Copy link
 #3

Updated by Victor Julien over 6 years ago

  • Subject changed from externd protocol detection to specify flow direction to extend protocol detection to specify flow direction
Actions
Copy link
 #4

Updated by Victor Julien almost 6 years ago

Actions
Copy link
 #5

Updated by Victor Julien almost 6 years ago

  • Priority changed from Normal to High
Actions
Copy link
 #6

Updated by Victor Julien over 5 years ago

  • Status changed from Assigned to Closed
  • Priority changed from High to Normal
Actions
Copy link

Also available in: Atom PDF