Project

General

Profile

Actions
Copy link

Feature #5664

open

"Scope" bits should have an expiration

Added by Philippe Antoine about 2 years ago. Updated 6 months ago.

Status:
Assigned
Priority:
Normal
Assignee:
Shivani Bhardwaj
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

New kind of "bits" need to be implemented. These should be able to have different scope like transaction. This means that the bits should expire when a tx does

Related issues 6 (6 open — 0 closed)

Related to Suricata - Task #4380: tracking: improvements to bits, ints, varsAssignedVictor JulienActions
Related to Suricata - Task #5488: Suricon 2022 brainstormAssignedVictor JulienActions
Related to Suricata - Task #6443: Suricon 2023 brainstormAssignedVictor JulienActions
Related to Suricata - Feature #5665: rules: bidirectional transaction matchingIn ReviewPhilippe AntoineActions
Related to Suricata - Feature #6455: txbits: support for new type of bitsAssignedShivani BhardwajActions
Related to Suricata - Feature #6459: filebits: support for new type of bitsAssignedShivani BhardwajActions
Actions
Copy link
 #1

Updated by Philippe Antoine about 2 years ago

  • Related to Task #4380: tracking: improvements to bits, ints, vars added
Actions
Copy link
 #2

Updated by Philippe Antoine about 2 years ago

  • Related to Task #5488: Suricon 2022 brainstorm added
Actions
Copy link
 #3

Updated by Juliana Fajardini Reichow about 2 years ago

  • Assignee changed from OISF Dev to Shivani Bhardwaj
  • Target version changed from TBD to 7.0.0-rc1
Actions
Copy link
 #4

Updated by Shivani Bhardwaj about 2 years ago

  • Subject changed from Flowbit expiration to "Scope" bits with expiration
  • Description updated (diff)
  • Target version changed from 7.0.0-rc1 to 8.0.0-beta1
Actions
Copy link
 #5

Updated by Juliana Fajardini Reichow over 1 year ago

  • Status changed from New to Assigned
Actions
Copy link
 #6

Updated by Philippe Antoine about 1 year ago

  • Related to Task #6443: Suricon 2023 brainstorm added
Actions
Copy link
 #7

Updated by Philippe Antoine about 1 year ago

  • Related to Feature #5665: rules: bidirectional transaction matching added
Actions
Copy link
 #8

Updated by Shivani Bhardwaj about 1 year ago

  • Subject changed from "Scope" bits with expiration to "Scope" bits should have an expiration

filebit and txbit should have an expiration.

Actions
Copy link
 #9

Updated by Shivani Bhardwaj about 1 year ago

  • Related to Feature #6455: txbits: support for new type of bits added
Actions
Copy link
 #10

Updated by Shivani Bhardwaj about 1 year ago

  • Related to Feature #6459: filebits: support for new type of bits added
Actions
Copy link
 #11

Updated by Philippe Antoine 6 months ago

I think #5665 solves most of the needs for this

So, it would be nice to get #5665 and then get feedback again about this one

Actions
Copy link

Also available in: Atom PDF