suricata

You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

History

Giuseppe Longo e89b7644a8 dhcp: distinguish malformed and truncated options This patch distinguishes malformed DHCP options from truncated ones. Previously, the malformed_options field was never set and parsing errors in overloaded file and sname fields were silently discarded. This caused malformed options to be reported as truncated or not reported at all. Classify errors in the primary option stream and overloaded fields. Treat failures within fixed-size overloaded fields as malformed because those fields are already fully present. Ticket #8874		2 months ago
..
README.txt	…
ack.pcap	…
detect.rs	detect: helper for buffer register requires progress	6 months ago
dhcp.rs	dhcp: parse pad option as single byte	2 months ago
discover.pcap	…
logger.rs	rust: fix collapsible_match warnings	6 months ago
mod.rs	rust/dhcp: rustfmt	2 years ago
offer.pcap	…
parser.rs	dhcp: distinguish malformed and truncated options	2 months ago
request.pcap	…

README.txt

These test pcap files are individual packets broken out of a pcap
containing 4 DHCP messages. The original source of the PCAP file is

https://wiki.wireshark.org/SampleCaptures?action=AttachFile&do=get&target=dhcp.pcap