Project

General

Profile

Actions
Copy link

Task #6576

open
JF JF

pgsql: log identifier for unknown messages?

Task #6576: pgsql: log identifier for unknown messages?

Added by Juliana Fajardini Reichow over 2 years ago. Updated 6 months ago.

Status:
Assigned
Priority:
Normal
Assignee:
Juliana Fajardini Reichow
Target version:
9.0.0-beta1
Effort:
Difficulty:
Label:

Description

Saving this as a question because we have to consider what are the implications of doing this, and how it should be done:
- should unknown messages be stored in existing transactions?
- or should they go to a newly created one?

Understand at least the initial consequences of each approach, and then decide if and when to log any info for unknown message types for pgsql.

VJ Updated by Victor Julien about 1 year ago Actions
Copy link
 #2

  • Target version changed from 8.0.0-beta1 to 8.0.0-rc1

JF Updated by Juliana Fajardini Reichow 11 months ago Actions
Copy link
 #3

Wondering if the scope of this task shouldn't be widened to be about better handling unknown messages, not just logging, but also what State to use for pgsql's state machine.
Cf https://github.com/OISF/suricata/pull/13134/files#r2070960112

JF Updated by Juliana Fajardini Reichow 11 months ago Actions
Copy link
 #4

Could this be done with app-layer events?

VJ Updated by Victor Julien 10 months ago Actions
Copy link
 #5

  • Target version changed from 8.0.0-rc1 to 9.0.0-beta1

JF Updated by Juliana Fajardini Reichow 6 months ago Actions
Copy link
 #6

  • Status changed from New to Assigned
Actions
Copy link

Also available in: PDF Atom