Project

General

Profile

Actions
Copy link

Optimization #6575

open

detect/multi-buffer: use single definition of struct PrefilterMpmKrb5Name

Added by Philippe Antoine 6 months ago. Updated 3 months ago.

Status:
In Review
Priority:
High
Assignee:
Philippe Antoine
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

typedef struct PrefilterMpmKrb5Name {
    int list_id;
    const MpmCtx *mpm_ctx;
    const DetectEngineTransforms *transforms;
} PrefilterMpmKrb5Name;

is redefined and used by all multi-buffer keywords

Related issues 2 (2 open — 0 closed)

Related to Suricata - Feature #5234: SSL/TLS Sticky Buffer for subjectAltNameIn ReviewShivani BhardwajActions
Blocks Suricata - Bug #2224: Negated http_* match returns false if buffer not populatedIn ReviewPhilippe AntoineActions
Actions
Copy link

Also available in: Atom PDF