Project

General

Profile

Actions

Feature #3292

closed

support for network service header (NSH)

Added by Andreas Herz almost 5 years ago. Updated almost 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:
Protocol

Description

First part would be a dedicated protocol parser for NSH.

Second part would be to have some sort of integration within the engine based on the metainformation we receive from the NSH. One example might be deciding which tenant to use.

Another option for inline mode would be to add a flag to the packet that has been analyzed so another hop can investigate it.


Related issues 1 (1 open0 closed)

Related to Suricata - Task #3288: Suricon 2019 brainstormAssignedVictor JulienActions
Actions #1

Updated by Victor Julien almost 5 years ago

For this ticket we will need actual use cases with pcaps and a description of the expected outcome.

Actions #2

Updated by Victor Julien almost 5 years ago

  • Status changed from New to Feedback
  • Parent task deleted (#3288)
Actions #3

Updated by Victor Julien almost 5 years ago

  • Related to Task #3288: Suricon 2019 brainstorm added
Actions #4

Updated by Victor Julien almost 5 years ago

  • Label Protocol added
Actions #5

Updated by Victor Julien almost 4 years ago

  • Status changed from Feedback to In Review
  • Assignee changed from Community Ticket to Carl Smith
  • Target version changed from TBD to 7.0.0-beta1
Actions

Also available in: Atom PDF