mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
This adds a parser for LLMNR protocol over both UDP and TCP. The parser reuses the existing DNS functions since LLMNR shares the same wire format as DNS, but implements its own protocol-specific validation: - LLMNR-specific flag checks (C, TC, T bits) - Opcode validation (only standard query opcode 0 is valid) - An Event is set if Z-flag is set, since it's must be zero per RFC4795 LLMNR transactions inherit DNS behavior where each packet creates a new state with one transaction. Ticket #8366 |
5 months ago | |
|---|---|---|
| .. | ||
| .cargo | 2 years ago | |
| derive | 6 months ago | |
| ffi | 5 months ago | |
| htp | 10 months ago | |
| src | 5 months ago | |
| suricatactl | 7 months ago | |
| suricatasc | 7 months ago | |
| sys | 5 months ago | |
| .gitignore | 2 years ago | |
| Cargo.lock.in | 6 months ago | |
| Cargo.toml.in | 5 months ago | |
| Makefile.am | 5 months ago | |
| cbindgen.toml | 6 months ago | |
| rustfmt.toml | ||