suricata

Author	SHA1	Message	Date
Shivani Bhardwaj	df0e9f106b	mqtt: add too_many_properties event and limit So far, the properties parsed across various different types of MQTT messages was unbounded and could be exploited. Add a limit of 255 on the maximum number of properties that any message type can store. Additionally, raise an event for too many properties indicating an anomaly in the network traffic. Ticket: 8839	2 months ago
Philippe Antoine	03ba8a71d8	mqtt: bounds number of messages per tx Ticket: 8525	4 months ago
Philippe Antoine	eec4a44275	rules: SID allocation range is now documented in README.md directly in the repo, and not in an external wiki	6 months ago
Sascha Steinbiss	1ba62993d5	mqtt: raise event on parse error	5 years ago
Philippe Antoine	a8079dc978	mqtt: limits the number of active transactions per flow Ticket: 4530 So, that we do not get DOS by quadratic complexity, while looking for a new pkt_id over the ever growing list of active transactions	5 years ago
Jason Ish	8bd68478a4	rules/mqtt: renumber mqtt events to avoid conflict with ssh Both SSH and MQTT events were in the 2228000 range. As SSH was added first, renumber MQTT events into the 2229000 range which is free.	6 years ago
Sascha Steinbiss	c31360070b	rust/mqtt: add MQTT parser	6 years ago