Project

General

Profile

Actions
Copy link

Feature #6261

open

Add GRE as a parsible protocol

Added by Thomas Winter 9 months ago. Updated 6 months ago.

Status:
In Review
Priority:
Normal
Assignee:
Thomas Winter
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

This will allow rules wanting to match on GRE packets without having to specify the protocol number specifically.

For example:
alert gre any any -> any any (msg:"gre-decoder-events GRE packet too small"; decode-event:gre.pkt_too_small; sid:2200052; rev:1;)

Related issues 1 (1 open — 0 closed)

Related to Suricata - Documentation #5660: userguide: add (more) documentation for the GRE protocolNewOISF DevActions
Actions
Copy link
 #2

Updated by Juliana Fajardini Reichow 9 months ago

  • Status changed from New to In Review
  • Assignee changed from OISF Dev to Thomas Winter

Updated ticket to reflect status and assignee.

Actions
Copy link
 #3

Updated by Juliana Fajardini Reichow 8 months ago

  • Related to Documentation #5660: userguide: add (more) documentation for the GRE protocol added
Actions
Copy link
 #4

Updated by Juliana Fajardini Reichow 8 months ago

Added relationship to ticket about better documenting GRE

Actions
Copy link
 #5

Updated by Juliana Fajardini Reichow 8 months ago

  • Target version changed from TBD to 7.0.2

Added target version, to ensure this won't fall off our radar.

Actions
Copy link
 #6

Updated by Victor Julien 7 months ago

  • Target version changed from 7.0.2 to 7.0.3
Actions
Copy link
 #7

Updated by Victor Julien 6 months ago

  • Target version changed from 7.0.3 to 7.0.4
Actions
Copy link
 #8

Updated by Victor Julien 6 months ago

  • Target version changed from 7.0.4 to 8.0.0-beta1
Actions
Copy link

Also available in: Atom PDF