suricata

You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

History

Samaresh Kumar Singh f06bb7d43e dhcp: support option 52 overload Per RFC 2132 the BOOTP sname and file fields can hold extra DHCP options when option 52 is present, but the parser ignored them. After parsing the main options we now look up option 52 and walk sname or file as additional option streams, appending what we find to the same options vector so the logger and detection keywords see the overloaded values too. Bug: #8538.		5 months ago
..
README.txt	rust/dhcp: Rust based DHCP decoder and logger.	8 years ago
ack.pcap	rust/dhcp: Rust based DHCP decoder and logger.	8 years ago
detect.rs	detect: helper for buffer register requires progress	6 months ago
dhcp.rs	dhcp: support option 52 overload	5 months ago
discover.pcap	rust/dhcp: Rust based DHCP decoder and logger.	8 years ago
logger.rs	rust: fix collapsible_match warnings	6 months ago
mod.rs	rust/dhcp: rustfmt	2 years ago
offer.pcap	rust/dhcp: Rust based DHCP decoder and logger.	8 years ago
parser.rs	dhcp: support option 52 overload	5 months ago
request.pcap	rust/dhcp: Rust based DHCP decoder and logger.	8 years ago

README.txt

These test pcap files are individual packets broken out of a pcap
containing 4 DHCP messages. The original source of the PCAP file is

https://wiki.wireshark.org/SampleCaptures?action=AttachFile&do=get&target=dhcp.pcap