Project

General

Profile

Actions

Feature #2572

closed

extend protocol detection to specify flow direction

Added by Victor Julien over 5 years ago. Updated almost 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

In midstream and async cases, the flow direction can be wrong. It's not always possible to detect this based on the packet properties, but the protocol detection can often tell.

Implement a way to allow protocol detect to change the flow direction.


Related issues 3 (3 open0 closed)

Blocks Suricata - Feature #1125: smtp: improve protocol detectionIn ReviewPhilippe AntoineActions
Blocks Suricata - Feature #273: IRC protocol detection supportNewCommunity TicketActions
Blocks Suricata - Optimization #2272: Analyze DNS response if query is not presentAssignedJason IshActions
Actions

Also available in: Atom PDF