Project

General

Profile

Actions
Copy link

Feature #4967

closed

Task #4966: tracking: QUIC protocol support

QUIC v1 support

Added by Victor Julien almost 3 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
7.0.0-beta1
Effort:
Difficulty:
Label:

Description

QUIC v1 protocol is different from GQUIC in various ways. In the traffic I see it embeds a TLS1.3 client hello with SNI and possibly enough info for something like JA3?

Related issues 2 (0 open — 2 closed)

Blocks Suricata - Feature #4985: quic: support framesRejectedPhilippe AntoineActions
Follows Suricata - Feature #3440: Add GQUIC Protocol Analysis and CYU FingerprintingClosedEmmanuel ThompsonActions
Actions
Copy link
 #1

Updated by Philippe Antoine almost 3 years ago

Should it be done after #3440 ?

Actions
Copy link
 #2

Updated by Victor Julien almost 3 years ago

  • Follows Feature #3440: Add GQUIC Protocol Analysis and CYU Fingerprinting added
Actions
Copy link
 #3

Updated by Victor Julien almost 3 years ago

Philippe Antoine wrote in #note-1:

Should it be done after #3440 ?

Yes, that work (current PR is https://github.com/OISF/suricata/pull/6796) should form the basis.

Actions
Copy link
 #4

Updated by Philippe Antoine almost 3 years ago

  • Status changed from Assigned to In Review
Actions
Copy link
 #5

Updated by Philippe Antoine almost 3 years ago

Actions
Copy link
 #6

Updated by Philippe Antoine over 2 years ago

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: Atom PDF