Project

General

Profile

Actions
Copy link

Feature #3503

open

decoders: handle trailing data

Added by Victor Julien about 4 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:

Description

A number of decoders can take more data than the upper layers can consume. In some protocols trailing data is valid (e.g. ethernet can have trailing data). See how we should deal with this in logging, events and detection.

See also: https://github.com/OISF/suricata/pull/4586#discussion_r383682574

No data to display

Actions
Copy link

Also available in: Atom PDF