Project

General

Profile

Actions
Copy link

Feature #3503

open
VJ OD

decoders: handle trailing data

Feature #3503: decoders: handle trailing data

Added by Victor Julien about 6 years ago. Updated almost 2 years ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

A number of decoders can take more data than the upper layers can consume. In some protocols trailing data is valid (e.g. ethernet can have trailing data). See how we should deal with this in logging, events and detection.

See also: https://github.com/OISF/suricata/pull/4586#discussion_r383682574

PA Updated by Philippe Antoine almost 2 years ago Actions
Copy link
 #1

  • Assignee set to OISF Dev
  • Target version set to TBD
Actions
Copy link

Also available in: PDF Atom