Project

General

Profile

Actions
Copy link

Feature #3503

open

decoders: handle trailing data

Added by Victor Julien almost 5 years ago. Updated 6 months ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

A number of decoders can take more data than the upper layers can consume. In some protocols trailing data is valid (e.g. ethernet can have trailing data). See how we should deal with this in logging, events and detection.

See also: https://github.com/OISF/suricata/pull/4586#discussion_r383682574

Actions
Copy link
 #1

Updated by Philippe Antoine 6 months ago

  • Assignee set to OISF Dev
  • Target version set to TBD
Actions
Copy link

Also available in: Atom PDF