Project

General

Profile

Actions

Feature #5705

open
OJ PC

protocol: Wireguard parser

Feature #5705: protocol: Wireguard parser

Added by Odin Jenseg almost 4 years ago. Updated 6 days ago.

Status:
Assigned
Priority:
Normal
Target version:
Effort:
medium
Difficulty:
Label:
Protocol

Description

Adding a parser for the Wireguard VPN protocol.

  • Includes detection of the protocol using patterns.
  • Protocol logs

PR should be available before end of this year.


Related issues 1 (1 open — 0 closed)

Related to Suricata - Task #8123: Suricon 2025 BrainstormAssignedVictor JulienActions

VJ Updated by Victor Julien almost 4 years ago Actions #1

  • Status changed from New to In Progress

JF Updated by Juliana Fajardini Reichow 11 months ago Actions #2

  • Related to Task #8123: Suricon 2025 Brainstorm added

JF Updated by Juliana Fajardini Reichow 11 months ago Actions #3

Pierre Chifflier indicates he has a Wireguard parser.

VJ Updated by Victor Julien 11 months ago Actions #4

  • Status changed from In Progress to Assigned
  • Assignee changed from Odin Jenseg to Pierre Chifflier

@Pierre Chifflier did you have that parser in your public rust crates or somewhere else?

In general we discussed at suricon 2025 that protocol detection is probably the most interesting part.

VJ Updated by Victor Julien 11 months ago Actions #5

  • Subject changed from Add Wireguard parser to protocol: Wireguard parser

LS Updated by Lukas Sismis 6 days ago Actions #6

Hi @Pierre Chifflier ,
are you still interested in the ticket or should the ticket be reassigned to, e.g., community?
Thank you.

Actions

Also available in: PDF Atom