Open Information Security Foundation

05/20/2023

RS 11:43 PM Suricata Task #4082: ftp: convert parser to Rust

Hey @vjulien, I'll make this a priority and have a PR posted for review in June. Raj S

RS 03:55 AM Suricata Bug #4079: fileinfo events missing mac address info

Hi @vjulien, no apologies. I'm not looking at this ticket. But I am working on Task #4082. I will remove myself as the assignee for this. Thanks. Raj S

05/19/2023

RS 11:47 PM Suricata Task #4082: ftp: convert parser to Rust

Andreas Herz wrote in #note-8:
> @rsamnz do you plan to work on this? Let us know since this would help us planning
Hey @norg, yes I'm currently working on this Raj S

03/23/2023

RS 01:24 PM Suricata Bug #5486: eve: ethernet metadata is missing for some protocols or parts of a protocol

Also note that tunneled traffic exhibits similar behavior.
When TmThreadsSlotVarRun runs the Decode* routines to parse a packet and encounters a
tunnel packet, it runs DecodeGRE().
It then calls PacketTunnelPktSetup() to parse the... Raj S

RS 12:18 PM Suricata Bug #5486: eve: ethernet metadata is missing for some protocols or parts of a protocol

The reason for the missing ether is due to FlowFinish() creating two
pseudo packets p1 and p2 by calling FlowForceReassemblyPseudoPacketGet().
1. FlowForceReassemblyPseudoPacketGet() obtains a new packet p via PacketPoolGetPacket(), ... Raj S

02/28/2023

RS 06:29 AM Suricata Task #4082: ftp: convert parser to Rust

Targeting 8.0beta Raj S

10/13/2021

RS 11:01 AM Suricata Task #4082 (In Progress): ftp: convert parser to Rust

Raj S