Project

General

Profile

Actions
Copy link

Feature #3086

closed
KK JI

app_proto for Torrent traffic

Feature #3086: app_proto for Torrent traffic

Added by Kenneth Kolano almost 7 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
7.0.0-rc1
Effort:
medium
Difficulty:
medium
Label:
Protocol

Description

Currently the app_proto registered for Torrent traffic is "failed". Can the detection be revised to detect Torrent traffic?

It should be identifiable by the payload pre-fix: "d1:ad2:id20:".

Related issues 1 (1 open — 0 closed)

Related to Suricata - Task #4151: Research: New protocol supportNewCommunity TicketActions

AH Updated by Andreas Herz over 6 years ago Actions
Copy link
 #1

  • Assignee set to Community Ticket
  • Target version set to TBD
  • Effort set to medium
  • Difficulty set to medium

AB Updated by Aaron Bungay over 5 years ago Actions
Copy link
 #2

Working on this.

VJ Updated by Victor Julien over 5 years ago Actions
Copy link
 #3

  • Status changed from New to Assigned
  • Assignee changed from Community Ticket to Aaron Bungay

VJ Updated by Victor Julien over 5 years ago Actions
Copy link
 #4

Are you doing protocol detection only or a full parser?

VJ Updated by Victor Julien over 5 years ago Actions
Copy link
 #5

  • Related to Task #4151: Research: New protocol support added

AB Updated by Aaron Bungay over 5 years ago Actions
Copy link
 #6

Victor Julien wrote in #note-4:

Are you doing protocol detection only or a full parser?

Doing a full parser in rust for the BitTorrent DHT protocol :)

VJ Updated by Victor Julien over 5 years ago Actions
Copy link
 #7

  • Target version changed from TBD to 7.0.0-beta1
  • Label Protocol added

Great!

AB Updated by Aaron Bungay about 5 years ago Actions
Copy link
 #8

Victor Julien wrote in #note-7:

Great!

PR created - https://github.com/OISF/suricata/pull/5809 :)

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #9

  • Status changed from Assigned to In Review
  • Assignee changed from Aaron Bungay to Jason Ish

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #10

  • Subject changed from app_proto for Torrent traffic? to app_proto for Torrent traffic

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #11

  • Target version changed from 7.0.0-beta1 to 7.0.0-rc1

JI Updated by Jason Ish over 3 years ago Actions
Copy link
 #12

JI Updated by Jason Ish over 3 years ago Actions
Copy link
 #13

  • Status changed from In Review to Closed

Merged to master.

Actions
Copy link

Also available in: PDF Atom