You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Giuseppe Longo ba5e850264 sip: make pattern matching more robust ... SIP and SSDP share method names like NOTIFY and SUBSCRIBE, causing SSDP traffic to be misidentified as SIP. Add a probing parser callback that checks for "SIP/" in the payload before accepting a pattern match. Example of a misidentified flow before the fix: {"timestamp":"2014-02-27T19:44:43.164211+0100","flow_id":986757542077835,"event_type":"flow","src_ip":"192.168.1.1","src_port":9489,"dest_ip":"239.255.255.250 ","dest_port":1900,"ip_v":4,"proto":"UDP","app_proto":"sip","flow":{"..."}} After the fix: {"timestamp":"2014-02-27T19:44:43.164211+0100","flow_id":986757542077835,"event_type":"flow","src_ip":"192.168.1.1","src_port":9489,"dest_ip":"239.255.255.250 ","dest_port":1900,"ip_v":4,"proto":"UDP","app_proto":"failed","flow":{"..."}} Ticket #8355		3 months ago
..
.cargo	rust: rename .cargo/config to .cargo/config.toml	2 years ago
derive	rust/ffi: move AppLayerEvent to ffi	4 months ago
ffi	rust/ffi: add safe thread storage wrapper	3 months ago
htp	rust/htp: formatting fixup	8 months ago
src	sip: make pattern matching more robust	3 months ago
suricatactl	rust: limit clap verson to 4.5.57	6 months ago
suricatasc	rust: pin unicode-segmentation crate to 1.12.0	6 months ago
sys	bindgen: fix include ordering	3 months ago
.gitignore	rust: rename .cargo/config to .cargo/config.toml	2 years ago
Cargo.lock.in	psl: update to 2.1.206	4 months ago
Cargo.toml.in	rust: feature debug in main crate enables feature debug in ffi	4 months ago
Makefile.am	rust: build depends on ffi/Cargo.toml.in	4 months ago
cbindgen.toml	rust: exclude DETECT_BYTEMATH_ENDIAN_DEFAULT from bindings	3 months ago
rustfmt.toml	rustfmt: replace deprecated fn_args_layout with fn_params_layout	3 years ago