You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/rules
Victor Julien 6f42ae91c7 app-layer: protocol change API
Add API calls to upgrade to TLS or to request a protocol change
without a specific protocol expectation.

If the HTTP CONNECT session includes a port on the url, use that to
look up the probing parser during protocol detection. Solves a
missed detection of a SSLv2 session that upgrades to TLSv1. SSLv2
relies on the probing parser which is limited to certain ports.

In case of STARTTLS in SMTP and FTP, the port is hardcoded to 443.

A new event APPLAYER_UNEXPECTED_PROTOCOL is set if there was a
mismatch.
9 years ago
..
Makefile.am DNP3: Application layer decoder. 9 years ago
app-layer-events.rules app-layer: protocol change API 9 years ago
decoder-events.rules defrag: use frag_pkt_too_large instead of frag_too_large 9 years ago
dnp3-events.rules DNP3: Application layer decoder. 9 years ago
dns-events.rules dns-events: fix direction of malformed events + typo 9 years ago
files.rules Duplicate rule ID. 11 years ago
http-events.rules http: add event for leading spaces on request line 11 years ago
modbus-events.rules App-layer: Add Modbus protocol parser 11 years ago
smtp-events.rules app-layer-smtp: fix memory leak 10 years ago
stream-events.rules stream: detect and filter out bad window updates 11 years ago
tls-events.rules tls: increase max number of tls records per packet 9 years ago