Project

General

Profile

Actions
Copy link

Bug #8626

open
SB OD

detect: SOCKS is misdetected as dcerpc

Bug #8626: detect: SOCKS is misdetected as dcerpc

Added by Shivani Bhardwaj about 12 hours ago.

Status:
Assigned
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Affected Versions:
Effort:
Difficulty:
Label:

Description

Because of the initial sequence of 05 01 being a common pattern for both the protocol and Suricata only supporting DCERPC as of now, SOCKS is misdetected as DCERPC.

Related issues 1 (1 open — 0 closed)

Related to Suricata - Feature #4965: protocol: SOCKS supportAssignedVictor JulienActions
Actions
Copy link

Also available in: PDF Atom