Project

General

Profile

Actions

Feature #4587

closed
JO YK

dhcp: vendor class indentifier support

Feature #4587: dhcp: vendor class indentifier support

Added by Jason Ortiz over 4 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:
Beginner, Good First Issue, Protocol, Rust

Description

DHCP Option 60 (vendor class identifier) is a very useful field in using DHCP Inform packets to identify various devices on a network. If Suricata could log this option it would open many opportunities for creating alerts for or identifying specific things on the network. I am not sure what level of effort would be required to log this option as I just joined the community so any help would be greatly appreciated!

JI Updated by Jason Ish over 4 years ago Actions #1

  • Status changed from New to Assigned
  • Assignee set to Jason Ish

VJ Updated by Victor Julien about 3 years ago Actions #2

  • Status changed from Assigned to New
  • Assignee changed from Jason Ish to Community Ticket
  • Target version set to TBD
  • Label Beginner, Good First Issue, Protocol, Rust added

YK Updated by Yatin Kanetkar over 2 years ago Actions #3

  • Assignee changed from Community Ticket to Yatin Kanetkar

YK Updated by Yatin Kanetkar over 2 years ago Actions #4

  • Status changed from New to In Progress

JI Updated by Jason Ish over 2 years ago Actions #5

  • Status changed from In Progress to In Review

This is a useful addition, I'd like to recommend it for 7.0.1 and a 6.0.x backport.

PA Updated by Philippe Antoine over 2 years ago Actions #6

  • Target version changed from TBD to 7.0.1

Setting target version to 7.0.1 to decide if we want it now or later ;-)

PR is https://github.com/OISF/suricata/pull/9397

VJ Updated by Victor Julien over 2 years ago Actions #7

  • Subject changed from DHCP Option Parsing to dhcp: vendor class indentifier support

PA Updated by Philippe Antoine over 2 years ago Actions #8

  • Status changed from In Review to Closed
Actions

Also available in: PDF Atom