]> git.ipfire.org Git - thirdparty/suricata.git/commit
enip: convert to rust
authorPhilippe Antoine <contact@catenacyber.fr>
Fri, 17 Nov 2023 08:30:29 +0000 (09:30 +0100)
committerVictor Julien <victor@inliniac.net>
Fri, 7 Jun 2024 11:54:22 +0000 (13:54 +0200)
commit82c03f72c381728675776eda3ab63bbbe5320c72
tree8b38f8c9587500dda21a34497f9a3683fb078b36
parent0d267e29a5c5fc790765f752ae89805d7e91579b
enip: convert to rust

Ticket: 3958

- transactions are now bidirectional
- there is a logger
- gap support is improved with probing for resync
- frames support
- app-layer events
- enip_command keyword accepts now string enumeration as values.
- add enip.status keyword
- add keywords :
    enip.product_name, enip.protocol_version, enip.revision,
    enip.identity_status, enip.state, enip.serial, enip.product_code,
    enip.device_type, enip.vendor_id, enip.capabilities,
    enip.cip_attribute, enip.cip_class, enip.cip_instance,
    enip.cip_status, enip.cip_extendedstatus
62 files changed:
doc/userguide/configuration/suricata-yaml.rst
doc/userguide/rules/enip-keyword.rst
etc/schema.json
rules/Makefile.am
rules/enip-events.rules [new file with mode: 0644]
rust/src/applayer.rs
rust/src/enip/constant.rs [new file with mode: 0644]
rust/src/enip/detect.rs [new file with mode: 0644]
rust/src/enip/enip.rs [new file with mode: 0644]
rust/src/enip/logger.rs [new file with mode: 0644]
rust/src/enip/mod.rs [new file with mode: 0644]
rust/src/enip/parser.rs [new file with mode: 0644]
rust/src/lib.rs
src/Makefile.am
src/app-layer-enip-common.c [deleted file]
src/app-layer-enip-common.h [deleted file]
src/app-layer-enip.c [deleted file]
src/app-layer-parser.c
src/detect-cipservice.c
src/detect-cipservice.h
src/detect-engine-enip.c [deleted file]
src/detect-engine-register.c
src/detect-engine-register.h
src/detect-enip-capabilities.c [new file with mode: 0644]
src/detect-enip-capabilities.h [moved from src/app-layer-enip.h with 67% similarity]
src/detect-enip-cip-attribute.c [new file with mode: 0644]
src/detect-enip-cip-attribute.h [moved from src/detect-engine-enip.h with 50% similarity]
src/detect-enip-cip-class.c [new file with mode: 0644]
src/detect-enip-cip-class.h [new file with mode: 0644]
src/detect-enip-cip-extendedstatus.c [new file with mode: 0644]
src/detect-enip-cip-extendedstatus.h [new file with mode: 0644]
src/detect-enip-cip-instance.c [new file with mode: 0644]
src/detect-enip-cip-instance.h [new file with mode: 0644]
src/detect-enip-cip-status.c [new file with mode: 0644]
src/detect-enip-cip-status.h [new file with mode: 0644]
src/detect-enip-command.c [new file with mode: 0644]
src/detect-enip-command.h [new file with mode: 0644]
src/detect-enip-device-type.c [new file with mode: 0644]
src/detect-enip-device-type.h [new file with mode: 0644]
src/detect-enip-identity-status.c [new file with mode: 0644]
src/detect-enip-identity-status.h [new file with mode: 0644]
src/detect-enip-product-code.c [new file with mode: 0644]
src/detect-enip-product-code.h [new file with mode: 0644]
src/detect-enip-product-name.c [new file with mode: 0644]
src/detect-enip-product-name.h [new file with mode: 0644]
src/detect-enip-protocol-version.c [new file with mode: 0644]
src/detect-enip-protocol-version.h [new file with mode: 0644]
src/detect-enip-revision.c [new file with mode: 0644]
src/detect-enip-revision.h [new file with mode: 0644]
src/detect-enip-serial.c [new file with mode: 0644]
src/detect-enip-serial.h [new file with mode: 0644]
src/detect-enip-service-name.c [new file with mode: 0644]
src/detect-enip-service-name.h [new file with mode: 0644]
src/detect-enip-state.c [new file with mode: 0644]
src/detect-enip-state.h [new file with mode: 0644]
src/detect-enip-status.c [new file with mode: 0644]
src/detect-enip-status.h [new file with mode: 0644]
src/detect-enip-vendor-id.c [new file with mode: 0644]
src/detect-enip-vendor-id.h [new file with mode: 0644]
src/output.c
src/runmode-unittests.c
suricata.yaml.in