suricata

Commit Graph

Author	SHA1	Message	Date
Philippe Antoine	f9515dc71d	rfb: limit strings length Ticket: 8731 Adds a configurable limit to string lengths to avoid to retain too much memory for too long, and avoid producing log events that are too big	2 months ago
Philippe Antoine	eec4a44275	rules: SID allocation range is now documented in README.md directly in the repo, and not in an external wiki	6 months ago
Sascha Steinbiss	1f8a5874fb	rfb: never return error on unknown traffic We only try to parse a small subset of what is possible in RFB. Currently we only understand some standard auth schemes and stop parsing when the server-client handshake is complete. Since in IPS mode returning an error from the parser causes drops that are likely uncalled for, we do not want to return errors when we simply do not understand what happens in the traffic. This addresses Redmine #5912. Bug: #5912.	3 years ago

Author

SHA1

Message

Date

Philippe Antoine

f9515dc71d

rfb: limit strings length

Ticket: 8731

Adds a configurable limit to string lengths to avoid to retain
too much memory for too long, and avoid producing log events
that are too big

Philippe Antoine

eec4a44275

rules: SID allocation range is now documented in README.md

directly in the repo, and not in an external wiki

Sascha Steinbiss

1f8a5874fb

rfb: never return error on unknown traffic

We only try to parse a small subset of what is possible in
RFB. Currently we only understand some standard auth schemes
and stop parsing when the server-client handshake is complete.
Since in IPS mode returning an error from the parser causes
drops that are likely uncalled for, we do not want to return
errors when we simply do not understand what happens in the
traffic. This addresses Redmine #5912.

Bug: #5912.

3 Commits (db36f39632092510bea85613e65bf9750242e899)