]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect/ftp: Add ftp.completion_code keyword
authorJeff Lucovsky <jlucovsky@oisf.net>
Sat, 29 Mar 2025 15:01:17 +0000 (11:01 -0400)
committerVictor Julien <victor@inliniac.net>
Mon, 19 May 2025 19:22:08 +0000 (21:22 +0200)
commitf8575dab50e0cfde1cec2d1231be7cdf99df2fb1
tree9465cdb05da863044001a276d4b29fa5844d9a33
parent31a395c734f7664be2d5b526de1a65f9cbe8f883
detect/ftp: Add ftp.completion_code keyword

Issue: 7507

Implement the ftp.completion_code sticky buffer. Multi-buffer as an FTP
command can produce multiple responses.

E.g., with the FTP command RETR
    RETR temp.txt
    150 Opening BINARY mode data connection for temp.txt (1164 bytes).
    226 Transfer complete.
rust/src/ftp/response.rs
src/Makefile.am
src/detect-engine-register.c
src/detect-engine-register.h
src/detect-ftp-completion-code.c [new file with mode: 0644]
src/detect-ftp-completion-code.h [new file with mode: 0644]
src/output-json-ftp.c