Project

General

Profile

Actions
Copy link

Feature #8334

open
VJ LS

firewall: allow matching on packet layers

Feature #8334: firewall: allow matching on packet layers

Added by Victor Julien 4 months ago. Updated 3 days ago.

Status:
Assigned
Priority:
Normal
Assignee:
Lukas Sismis
Target version:
9.0.0-beta1
Effort:
Difficulty:
Label:

Description

The firewall mode should be able to distinguish between "Ethernet/IP/TCP" and "Ethernet/VLAN/GRE/Ethernet/IP/TCP". A packet should somehow expose this to the detection engine.

Perhaps a field that holds a list of protocol id's, starting at the datalink:
DLT_EN10MB:IPV4:TCP

Perhaps this would just be string buffer, where we can match using content.

Related issues 1 (1 open — 0 closed)

Related to Suricata - Task #8435: firewall: investigate handling of encapsulation/tunneling like GRE/VXLANTriagedOISF DevActions

VJ Updated by Victor Julien 3 months ago Actions
Copy link
 #1

  • Related to Task #8435: firewall: investigate handling of encapsulation/tunneling like GRE/VXLAN added

JI Updated by Jason Ish about 1 month ago Actions
Copy link
 #2

  • Status changed from New to Triaged
  • Assignee set to OISF Dev

LS Updated by Lukas Sismis 3 days ago Actions
Copy link
 #3

  • Status changed from Triaged to Assigned
  • Assignee changed from OISF Dev to Lukas Sismis
  • Target version changed from TBD to 9.0.0-beta1
Actions
Copy link

Also available in: PDF Atom