Project

General

Profile

Actions
Copy link

Feature #6090

closed

eve/alert: missing dcerpc metadata

Added by Philippe Antoine over 1 year ago. Updated 6 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:
Good First Issue

Description

See https://github.com/OISF/suricata/pull/8922

Related issues 2 (0 open — 2 closed)

Related to Suricata - Optimization #3827: clean up logging initialization codeClosedPhilippe AntoineActions
Copied from Suricata - Bug #5977: eve/alert: missing KRB5 metadataClosedPhilippe AntoineActions
Actions
Copy link
 #1

Updated by Philippe Antoine over 1 year ago

  • Copied from Bug #5977: eve/alert: missing KRB5 metadata added
Actions
Copy link
 #2

Updated by Philippe Antoine about 1 year ago

Actions
Copy link
 #3

Updated by Philippe Antoine 7 months ago

  • Tracker changed from Bug to Feature
  • Affected Versions deleted (6.0.10, 7.0.0-rc1)
Actions
Copy link
 #4

Updated by Victor Julien 6 months ago

Can this get an actual explanation, instead of a link to a PR?

Actions
Copy link
 #5

Updated by Philippe Antoine 6 months ago

We have app-layer metadata in alerts for most protocols, but not for DCERPC...

Actions
Copy link
 #6

Updated by Lukas Sismis 6 months ago

  • Status changed from New to In Progress
  • Assignee changed from OISF Dev to Philippe Antoine
  • Target version changed from TBD to 8.0.0-beta1
Actions
Copy link
 #7

Updated by Philippe Antoine 6 months ago

  • Status changed from In Progress to In Review
Actions
Copy link
 #8

Updated by Philippe Antoine 6 months ago

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: Atom PDF