Project

General

Profile

Actions

Feature #8488

closed
JI JI

ntp: use a buffer for reference id, not a u32

Feature #8488: ntp: use a buffer for reference id, not a u32

Added by Jason Ish about 2 months ago. Updated about 2 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

To enable kiss of death detection, it would make more sense to have the reference ID as a buffer rather than a u32, as it often contains a short string. And when it doesn't contain a short string, it often represents an IP address.


Related issues 2 (0 open2 closed)

Related to Suricata - Feature #8425: ntp: add ntp transaction loggingClosedJason IshActions
Related to Suricata - Feature #8394: firewall: support NTP hook states for firewall rule evaluationClosedJason IshActions
Actions

Also available in: PDF Atom