Project

General

Profile

Actions

Feature #4566

open

pgsql: add subprotocol-states

Added by Juliana Fajardini Reichow almost 3 years ago. Updated almost 2 years ago.

Status:
New
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:
Protocol

Description

In order to keep adding PostgreSQL support in Suricata, cover sub-protocol states:
- Extended query
- COPY operators
- Replication
- Function call
- Termination

Even though PostgreSQL refers to those as sub-protocols, to Suri, they're more like sub-states, where we'll expect to parse different sets of messages.

These could then be used in some Detect situations as well.

More details about each sub-protocol can be found in the protocol official documentation: https://www.postgresql.org/docs/13/protocol-flow.html


Subtasks 1 (1 open0 closed)

Feature #4854: pgsql: Add COPY subprotocol-stateNewJuliana Fajardini ReichowActions

Related issues 1 (0 open1 closed)

Related to Suricata - Feature #4241: Protocol support: PostgreSQL (pgsql)ClosedJuliana Fajardini ReichowActions
Actions

Also available in: Atom PDF