You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/rust/src/dhcp
Victor Julien 79499e4769 app-layer: move files into transactions
Update APIs to store files in transactions instead of the per flow state.

Goal is to avoid the overhead of matching up files and transactions in
cases where there are many of both.

Update all protocol implementations to support this.

Update file logging logic to account for having files in transactions. Instead
of it acting separately on file containers, it is now tied into the
transaction logging.

Update the filestore keyword to consider a match if filestore output not
enabled.
3 years ago
..
README.txt
ack.pcap
detect.rs dhcp: adds renewal-time keyword 3 years ago
dhcp.rs app-layer: move files into transactions 3 years ago
discover.pcap
logger.rs rust: remove unnecessary nested match 4 years ago
mod.rs dhcp: adds leasetime keyword 3 years ago
offer.pcap
parser.rs rust/dhcp: convert parser to nom7 functions 4 years ago
request.pcap

README.txt

These test pcap files are individual packets broken out of a pcap
containing 4 DHCP messages. The original source of the PCAP file is

https://wiki.wireshark.org/SampleCaptures?action=AttachFile&do=get&target=dhcp.pcap