Project

General

Profile

Actions
Copy link

Feature #5674

open

Support layered protocols

Added by Philippe Antoine about 2 years ago. Updated about 1 year ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Like DCERPC can be directly over UDP, or over SMB

Related issues 2 (1 open — 1 closed)

Related to Suricata - Task #5488: Suricon 2022 brainstormAssignedVictor JulienActions
Related to Suricata - Feature #5773: Support DNS over HTTPS (DoH)ClosedPhilippe AntoineActions
Actions
Copy link
 #1

Updated by Philippe Antoine about 2 years ago

  • Related to Task #5488: Suricon 2022 brainstorm added
Actions
Copy link
 #2

Updated by Philippe Antoine about 2 years ago

Like web socket, COTP...

Actions
Copy link
 #3

Updated by Philippe Antoine about 1 year ago

Actions
Copy link
 #4

Updated by Philippe Antoine about 1 year ago

Idea to do this : create a synthetic sub flow, so that each flow has its own app-layer

Actions
Copy link
 #5

Updated by Philippe Antoine about 1 year ago

Philippe Antoine wrote in #note-4:

Idea to do this : create a synthetic sub flow, so that each flow has its own app-layer

People may get confused if two flows get logged (one synthetic and a real one) with different app-layers

Actions
Copy link

Also available in: Atom PDF