Feature #3955: Protocol detection : run probing parser for protocol found in other direction - Suricata - Open Information Security Foundation

Actions

Feature #3955

closed

Status:

Closed

Priority:

Normal

Assignee:

Target version:

Effort:

Difficulty:

Label:

Description

This is especially useful for HTTP2 where there is one magic pattern only in one direction from client to server.

This is useful as probing parsers run only on some ports, when pattern matching runs on all ports.

Otherwise, we get one anomaly APPLAYER_DETECT_PROTOCOL_ONLY_ONE_DIRECTION

Actions

Actions

Actions

Also available in: Atom PDF