Project

General

Profile

Actions

Feature #6261

open

Add GRE as a parsible protocol

Added by Thomas Winter 9 months ago. Updated 5 months ago.

Status:
In Review
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

This will allow rules wanting to match on GRE packets without having to specify the protocol number specifically.

For example:
alert gre any any -> any any (msg:"gre-decoder-events GRE packet too small"; decode-event:gre.pkt_too_small; sid:2200052; rev:1;)


Related issues 1 (1 open0 closed)

Related to Suricata - Documentation #5660: userguide: add (more) documentation for the GRE protocolNewOISF DevActions
Actions #2

Updated by Juliana Fajardini Reichow 8 months ago

  • Status changed from New to In Review
  • Assignee changed from OISF Dev to Thomas Winter

Updated ticket to reflect status and assignee.

Actions #3

Updated by Juliana Fajardini Reichow 8 months ago

  • Related to Documentation #5660: userguide: add (more) documentation for the GRE protocol added
Actions #4

Updated by Juliana Fajardini Reichow 8 months ago

Added relationship to ticket about better documenting GRE

Actions #5

Updated by Juliana Fajardini Reichow 8 months ago

  • Target version changed from TBD to 7.0.2

Added target version, to ensure this won't fall off our radar.

Actions #6

Updated by Victor Julien 6 months ago

  • Target version changed from 7.0.2 to 7.0.3
Actions #7

Updated by Victor Julien 5 months ago

  • Target version changed from 7.0.3 to 7.0.4
Actions #8

Updated by Victor Julien 5 months ago

  • Target version changed from 7.0.4 to 8.0.0-beta1
Actions

Also available in: Atom PDF