Actions
Feature #4587
closeddhcp: vendor class indentifier support
Effort:
Difficulty:
Label:
Beginner, Good First Issue, Protocol, Rust
Description
DHCP Option 60 (vendor class identifier) is a very useful field in using DHCP Inform packets to identify various devices on a network. If Suricata could log this option it would open many opportunities for creating alerts for or identifying specific things on the network. I am not sure what level of effort would be required to log this option as I just joined the community so any help would be greatly appreciated!
Updated by Jason Ish over 3 years ago
- Status changed from New to Assigned
- Assignee set to Jason Ish
Updated by Victor Julien over 1 year ago
- Status changed from Assigned to New
- Assignee changed from Jason Ish to Community Ticket
- Target version set to TBD
- Label Beginner, Good First Issue, Protocol, Rust added
Updated by Yatin Kanetkar over 1 year ago
- Assignee changed from Community Ticket to Yatin Kanetkar
Updated by Yatin Kanetkar over 1 year ago
- Status changed from New to In Progress
Updated by Jason Ish over 1 year ago
- Status changed from In Progress to In Review
This is a useful addition, I'd like to recommend it for 7.0.1 and a 6.0.x backport.
Updated by Philippe Antoine over 1 year ago
- Target version changed from TBD to 7.0.1
Setting target version to 7.0.1 to decide if we want it now or later ;-)
Updated by Victor Julien over 1 year ago
- Subject changed from DHCP Option Parsing to dhcp: vendor class indentifier support
Updated by Philippe Antoine over 1 year ago
- Status changed from In Review to Closed
Actions