Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

next/396/20240415/v1 #10852

Merged
merged 7 commits into from
Apr 16, 2024
Merged

next/396/20240415/v1 #10852

merged 7 commits into from
Apr 16, 2024

Commits on Apr 14, 2024

  1. detect/analyzer: create tojson function for generic integers 

    As will be needed for tcp.mss
    @catenacyber
    catenacyber committed Apr 14, 2024
    Configuration menu
    Copy the full SHA
    49caf00 View commit details
    Browse the repository at this point in the history

  2. detect/analyzer: add more details for tcp_mss 

    Issue: OISF#6355
    @catenacyber
    catenacyber committed Apr 14, 2024
    Configuration menu
    Copy the full SHA
    bd3bed6 View commit details
    Browse the repository at this point in the history

Commits on Apr 15, 2024

  1. decode/ppp: support different header formats 

    Support compressed proto and optional HDLC header.

Bug: OISF#6942.
    @victorjulien
    victorjulien committed Apr 15, 2024
    Configuration menu
    Copy the full SHA
    68092ff View commit details
    Browse the repository at this point in the history

  2. decode/ppp: remove ppph check in favor of flag 

    As we now support variable size headers, we can't use the old pointer.

Replace with a flag.
    @victorjulien
    victorjulien committed Apr 15, 2024
    Configuration menu
    Copy the full SHA
    6067955 View commit details
    Browse the repository at this point in the history

  3. decode/ppp: clean up ppph pointer use 

    No users of the pointer anymore, so remove it.
    @victorjulien
    victorjulien committed Apr 15, 2024
    Configuration menu
    Copy the full SHA
    7e3f071 View commit details
    Browse the repository at this point in the history

  4. decode/ppp: add missing types definitions 

    Recognize PPP_CCP, PPP_CBCP and PPP_COMP_DGRAM.

Does not implement decoders for these record types, so these
are logged as unsupported types. Was "wrong_type" before.
    @victorjulien
    victorjulien committed Apr 15, 2024
    Configuration menu
    Copy the full SHA
    516441b View commit details
    Browse the repository at this point in the history

  5. flow/inject: Select thread_id by flow flag 

    Issue: 6957

Rather than selecting the thread_id index by packets traveling to the
server, use the flow flags. If the flow has been reversed, the second
slot is represents the thread id to be used.
    @jlucovsky @victorjulien
    jlucovsky authored and victorjulien committed Apr 15, 2024
    Configuration menu
    Copy the full SHA
    c305ed1 View commit details
    Browse the repository at this point in the history