Project

General

Profile

Feature #4566

Updated by Juliana Fajardini Reichow over 2 years ago

In order to keep adding PostgreSQL support in Suricata, cover sub-protocol states: sub-protocols: 
 - Extended query 
 - COPY operators 
 - Replication 
 - Function call 
 - Termination 

 Even though PostgreSQL refers to those as sub-protocols, to Suri, they're more like sub-states, where we'll expect to parse different sets of messages.  

 These could then be used in some Detect situations as well.  

 More details about each sub-protocol can be found in the protocol official documentation: https://www.postgresql.org/docs/13/protocol-flow.html 


Back