Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Websockets 2695 v9 #10104

Closed
wants to merge 10 commits into from
Closed

Websockets 2695 v9 #10104

wants to merge 10 commits into from

Commits on Dec 22, 2023

  1. enip: register on default 44818/tcp port 

    if no config option is found,
as is done for udp

Ticket: 6304
    @catenacyber
    catenacyber committed Dec 22, 2023
    Configuration menu
    Copy the full SHA
    9d3b407 View commit details
    Browse the repository at this point in the history

  2. detect/integer: rust derive for enumerations 

    Ticket: 6647

Allows keywords using integers to use strings in signature
parsing based on a rust enumeration with a derive.
    @catenacyber
    catenacyber committed Dec 22, 2023
    Configuration menu
    Copy the full SHA
    f9f9fe2 View commit details
    Browse the repository at this point in the history

Commits on Dec 30, 2023

  1. http2: add settings from newer RFCs 

    Including the one for websocket over HTTP/2
    @catenacyber
    catenacyber committed Dec 30, 2023
    Configuration menu
    Copy the full SHA
    fa530f7 View commit details
    Browse the repository at this point in the history

  2. protodetect: remove unused field 

    port is used in AppLayerProtoDetectProbingParserPort
and not in AppLayerProtoDetectProbingParserElement
    @catenacyber
    catenacyber committed Dec 30, 2023
    Configuration menu
    Copy the full SHA
    e5b832a View commit details
    Browse the repository at this point in the history

  3. protodetect: allows not port-based probing parsers 

    As for WebSocket which is detected only by protocol change.
    @catenacyber
    catenacyber committed Dec 30, 2023
    Configuration menu
    Copy the full SHA
    ef26c6a View commit details
    Browse the repository at this point in the history

  4. protodetect: run expected probing parser 

    When there is a protocol change, and a specific protocol is
expected, like WebSeocket, always run it, no matter the port.
    @catenacyber
    catenacyber committed Dec 30, 2023
    Configuration menu
    Copy the full SHA
    d5b5507 View commit details
    Browse the repository at this point in the history

  5. detect: integer keywords now support hexadecimal 

    So that we can write enip.revision: 0x203

Ticket: 6645
    @catenacyber
    catenacyber committed Dec 30, 2023
    Configuration menu
    Copy the full SHA
    dd4c32a View commit details
    Browse the repository at this point in the history

  6. detect: integer keywords now accept bitmasks 

    Ticket: 6648

Like &0x40=0x40 to test for a specific bit set
    @catenacyber
    catenacyber committed Dec 30, 2023
    Configuration menu
    Copy the full SHA
    faaf8c2 View commit details
    Browse the repository at this point in the history

Commits on Jan 2, 2024

  1. app-layer: websockets protocol support 

    Ticket: 2695
    @catenacyber
    catenacyber committed Jan 2, 2024
    Configuration menu
    Copy the full SHA
    45f7d74 View commit details
    Browse the repository at this point in the history

  2. fixup! protodetect: remove unused field

    @catenacyber
    catenacyber committed Jan 2, 2024
    Configuration menu
    Copy the full SHA
    563d596 View commit details
    Browse the repository at this point in the history