Feature #7566: dcerpc: applayer events for anomalous parsing results - Suricata - Open Information Security Foundation

Actions

Feature #7566

open

Status:

Assigned

Priority:

Normal

Assignee:

Target version:

Effort:

Difficulty:

Label:

Description

dcerpc lacks event handling which is important to convey what a possible issue could have led to an unexpected behavior.

Files

Download all files

rough_potato_broken_2.pcap (143 KB) rough_potato_broken_2.pcap	pcap with dcerpc	Artem Ka, 04/02/2025 12:02 PM
stats.log (5.17 KB) stats.log		Artem Ka, 04/02/2025 12:03 PM
packets_stats.log (10 KB) packets_stats.log		Artem Ka, 04/02/2025 12:03 PM
locks_stats.log (1.52 KB) locks_stats.log		Artem Ka, 04/02/2025 12:03 PM

Actions

Also available in: Atom PDF