Project

General

Profile

Actions
Copy link

Feature #7565

open

dcerpc: rpc interfaces info in request event

Added by Shivani Bhardwaj 1 day ago. Updated 1 day ago.

Status:
In Review
Priority:
Normal
Assignee:
Shivani Bhardwaj
Target version:
8.0.0-beta1
Effort:
low
Difficulty:
Label:

Description

RPC interface information comes with a BIND request for DCERPC which Suricata did log. However, the feedback from community was that the REQUEST type request should also carry this information for an easy correlation. Otherwise, one has to find the BIND request event for the same flow_id as a REQUEST request and find this information.

Actions
Copy link
 #1

Updated by Shivani Bhardwaj 1 day ago

  • Status changed from Assigned to In Review
Actions
Copy link

Also available in: Atom PDF