Project

General

Profile

Actions

Optimization #5566

open

pgsql: add events

Added by Juliana Fajardini Reichow about 2 years ago. Updated about 1 year ago.

Status:
In Progress
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

The lack of protocol events makes it harder to handle/signalize recoverable parsing errors in PGSQL.

Expected:

If Suri sees a corrupted PGSQL message but is able to correctly find the next pgsql PDU, throw an event
move onto parse the new message.


Subtasks 1 (1 open0 closed)

Optimization #6510: pgsql: add events (7.0.x backport)AssignedJuliana Fajardini ReichowActions

Related issues 1 (1 open0 closed)

Related to Suricata - Bug #5524: pgsql: parser should not error on parsing error, so as to keep on parsing the next PDUsIn ProgressJuliana Fajardini ReichowActions
Actions #1

Updated by Juliana Fajardini Reichow about 2 years ago

  • Related to Bug #5524: pgsql: parser should not error on parsing error, so as to keep on parsing the next PDUs added
Actions #2

Updated by Victor Julien about 2 years ago

  • Target version changed from 7.0.0-beta1 to 7.0.0-rc1
Actions #3

Updated by Victor Julien about 2 years ago

  • Target version changed from 7.0.0-rc1 to 8.0.0-beta1
Actions #4

Updated by Juliana Fajardini Reichow over 1 year ago

  • Status changed from New to In Progress

PR for review: https://github.com/OISF/suricata/pull/9404

(working on this as it seems to be the solution for #5524)

Actions #5

Updated by Juliana Fajardini Reichow about 1 year ago

  • Label Needs backport to 7.0 added
Actions #6

Updated by OISF Ticketbot about 1 year ago

  • Subtask #6510 added
Actions #7

Updated by OISF Ticketbot about 1 year ago

  • Label deleted (Needs backport to 7.0)
Actions

Also available in: Atom PDF