Actions
Feature #424
closed
AS
AS
App layer registration cleanup - Support specifying same alproto names in rules for different ip protocols
Feature #424:
App layer registration cleanup - Support specifying same alproto names in rules for different ip protocols
Effort:
Difficulty:
Label:
Description
The main goal would be to use same alproto name in rules for app protocols that support various ip carriers.
For example, unify "dcerpc" and "dcerpcudp", into a single "dcerpc". This should allow use of rules in the format.
alert dcerpc
instead of separate
alert dcerpcudp and alert dcerpc
Also carry out other cleanup work in app layer registration.
Actions