Project

General

Profile

Actions

Feature #3292

closed

support for network service header (NSH)

Added by Andreas Herz about 5 years ago. Updated almost 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:
Protocol

Description

First part would be a dedicated protocol parser for NSH.

Second part would be to have some sort of integration within the engine based on the metainformation we receive from the NSH. One example might be deciding which tenant to use.

Another option for inline mode would be to add a flag to the packet that has been analyzed so another hop can investigate it.


Related issues 1 (1 open0 closed)

Related to Suricata - Task #3288: Suricon 2019 brainstormAssignedVictor JulienActions
Actions

Also available in: Atom PDF