]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect: add (mpm) keyword for tls_sni
authorMats Klepsland <mats.klepsland@gmail.com>
Wed, 18 May 2016 11:49:47 +0000 (13:49 +0200)
committerVictor Julien <victor@inliniac.net>
Thu, 19 May 2016 07:44:45 +0000 (09:44 +0200)
commita13df67864d05ba56a9751e7310001296f7c6d59
tree2e88d14579536efa28661a3c781203c6c0f07884
parent3da79610afda76f9f32aad13c1bae202f9d803f6
detect: add (mpm) keyword for tls_sni

Match on server name indication (SNI) extension in TLS using tls_sni
keyword, e.g:

alert tls any any -> any any (msg:"SNI test"; tls_sni;
        content:"example.com"; sid:12345;)
16 files changed:
src/Makefile.am
src/detect-engine-analyzer.c
src/detect-engine-content-inspection.h
src/detect-engine-mpm.c
src/detect-engine-state.h
src/detect-engine-tls.c [new file with mode: 0644]
src/detect-engine-tls.h [new file with mode: 0644]
src/detect-engine.c
src/detect-fast-pattern.c
src/detect-parse.c
src/detect-tls-sni.c [new file with mode: 0644]
src/detect-tls-sni.h [new file with mode: 0644]
src/detect.c
src/detect.h
src/suricata-common.h
src/util-profiling.c