You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/rust/src/dns
Jason Ish 0623ada24d dns: better error handling when parsing names
The DNS name parser will error out with an error even if the
error is incomplete. Instead of manually generating errors,
use '?' to let the nom error ripple up the error handling chain.

The reason this wasn't done in the first place is this code
predates the ? operator, or we were not aware of it at the time.

This prevents the case where probing fails when there is enough data to
parse the header, but not enough to complete name parser. In such a case
a parse error is returned (instead of incomplete) resulting in the
payload not being detected as DNS.

Ticket #5034
4 years ago
..
detect.rs dns: use Direction enum 5 years ago
dns.rs dns: don't parse a full request during probe if not enough data 4 years ago
log.rs dns: add dns flag to dns request logging 5 years ago
lua.rs dns: parse SRV records 6 years ago
mod.rs dns/detect: dns.opcode keyword 7 years ago
parser.rs dns: better error handling when parsing names 4 years ago