Project

General

Profile

Actions

Feature #4967

closed

Task #4966: tracking: QUIC protocol support

QUIC v1 support

Added by Victor Julien 7 months ago. Updated 13 days ago.

Status:
Closed
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

QUIC v1 protocol is different from GQUIC in various ways. In the traffic I see it embeds a TLS1.3 client hello with SNI and possibly enough info for something like JA3?


Related issues 2 (1 open1 closed)

Blocks Feature #4985: quic: support framesAssignedPhilippe AntoineActions
Follows Feature #3440: Add GQUIC Protocol Analysis and CYU FingerprintingClosedEmmanuel ThompsonActions
Actions #1

Updated by Philippe Antoine 7 months ago

Should it be done after #3440 ?

Actions #2

Updated by Victor Julien 7 months ago

  • Follows Feature #3440: Add GQUIC Protocol Analysis and CYU Fingerprinting added
Actions #3

Updated by Victor Julien 7 months ago

Philippe Antoine wrote in #note-1:

Should it be done after #3440 ?

Yes, that work (current PR is https://github.com/OISF/suricata/pull/6796) should form the basis.

Actions #4

Updated by Philippe Antoine 6 months ago

  • Status changed from Assigned to In Review
Actions #5

Updated by Philippe Antoine 6 months ago

Actions #6

Updated by Philippe Antoine 13 days ago

  • Status changed from In Review to Closed
Actions

Also available in: Atom PDF