You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/rust
Philippe Antoine 464ff80c6a smb: protocol detection on pattern without midstream
To recognize a protocol, Suricata first looks for
patterns, which can be confirmed by a probing parser.
If this does not work, Suricata can try to run
some probing parsers on some ports.

This is the case for SMB.

This commit makes handling the confirming and the probing
paser differently even if they share much code.

The confirmation parser knows that a pattern has been found.
So, it must not do the midstream case of looking for this
pattern in the whole buffer, but only check it at the beginning.
But it must reverse direction if needed.
3 years ago
..
.cargo
derive rust/derive: pin proc-macro-crate to v1.1.0. 3 years ago
src smb: protocol detection on pattern without midstream 3 years ago
.gitignore
Cargo.toml.in rust: update regex & memchr dependencies 3 years ago
Makefile.am build: remove configure check for cargo vendor 3 years ago
cbindgen.toml quic: Add QUIC App Layer 4 years ago
rustfmt.toml