Project

General

Profile

Actions
Copy link

Optimization #3077

closed
JL JL

FTP parser command lookup

Optimization #3077: FTP parser command lookup

Added by Jeff Lucovsky over 6 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
5.0rc1
Effort:
Difficulty:
Label:

Description

The FTP parser should use mpm when looking for commands instead of performing a linear search over the command coordinates with squashed case.

Related issues 1 (0 open — 1 closed)

Related to Suricata - Feature #2315: eve: ftp loggingClosedJeff LucovskyActions

VJ Updated by Victor Julien over 6 years ago Actions
Copy link
 #1

  • Status changed from New to Assigned
  • Assignee set to Jeff Lucovsky
  • Target version set to 70
  • Effort deleted (low)

PA Updated by Philippe Antoine over 6 years ago Actions
Copy link
 #2

JL Updated by Jeff Lucovsky over 6 years ago Actions
Copy link
 #3

Also, address this comment from the FTP logging PR https://github.com/OISF/suricata/pull/3967#discussion_r302236153

" Ok. but then could output-json-ftp.c call some new parsing function in app-layer-ftp.c ?
This way, we will defer parsing until needed and the parsing will be in app-*.c files"

JL Updated by Jeff Lucovsky over 6 years ago Actions
Copy link
 #4

  • Status changed from Assigned to Closed

VJ Updated by Victor Julien over 6 years ago Actions
Copy link
 #5

  • Target version changed from 70 to 5.0rc1
Actions
Copy link

Also available in: PDF Atom