Project

General

Profile

Actions

Feature #5664

open

"Scope" bits should have an expiration

Added by Philippe Antoine almost 2 years ago. Updated 4 months ago.

Status:
Assigned
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

New kind of "bits" need to be implemented. These should be able to have different scope like transaction. This means that the bits should expire when a tx does


Related issues 6 (6 open0 closed)

Related to Suricata - Task #4380: tracking: improvements to bits, ints, varsAssignedVictor JulienActions
Related to Suricata - Task #5488: Suricon 2022 brainstormAssignedVictor JulienActions
Related to Suricata - Task #6443: Suricon 2023 brainstormAssignedVictor JulienActions
Related to Suricata - Feature #5665: rules: bidirectional transaction matchingIn ReviewPhilippe AntoineActions
Related to Suricata - Feature #6455: txbits: support for new type of bitsAssignedShivani BhardwajActions
Related to Suricata - Feature #6459: filebits: support for new type of bitsAssignedShivani BhardwajActions
Actions #1

Updated by Philippe Antoine almost 2 years ago

  • Related to Task #4380: tracking: improvements to bits, ints, vars added
Actions #2

Updated by Philippe Antoine almost 2 years ago

  • Related to Task #5488: Suricon 2022 brainstorm added
Actions #3

Updated by Juliana Fajardini Reichow almost 2 years ago

  • Assignee changed from OISF Dev to Shivani Bhardwaj
  • Target version changed from TBD to 7.0.0-rc1
Actions #4

Updated by Shivani Bhardwaj almost 2 years ago

  • Subject changed from Flowbit expiration to "Scope" bits with expiration
  • Description updated (diff)
  • Target version changed from 7.0.0-rc1 to 8.0.0-beta1
Actions #5

Updated by Juliana Fajardini Reichow over 1 year ago

  • Status changed from New to Assigned
Actions #6

Updated by Philippe Antoine 11 months ago

  • Related to Task #6443: Suricon 2023 brainstorm added
Actions #7

Updated by Philippe Antoine 11 months ago

  • Related to Feature #5665: rules: bidirectional transaction matching added
Actions #8

Updated by Shivani Bhardwaj 11 months ago

  • Subject changed from "Scope" bits with expiration to "Scope" bits should have an expiration

filebit and txbit should have an expiration.

Actions #9

Updated by Shivani Bhardwaj 11 months ago

  • Related to Feature #6455: txbits: support for new type of bits added
Actions #10

Updated by Shivani Bhardwaj 11 months ago

  • Related to Feature #6459: filebits: support for new type of bits added
Actions #11

Updated by Philippe Antoine 4 months ago

I think #5665 solves most of the needs for this

So, it would be nice to get #5665 and then get feedback again about this one

Actions

Also available in: Atom PDF