]> git.ipfire.org Git - thirdparty/suricata.git/commit
dcerpc/udp: improve detection
authorShivani Bhardwaj <shivanib134@gmail.com>
Sat, 13 Feb 2021 12:27:42 +0000 (17:57 +0530)
committerVictor Julien <victor@inliniac.net>
Mon, 22 Feb 2021 10:16:40 +0000 (11:16 +0100)
commitf967a491047a6d8eaa232944c690dadfb0cc3c86
treec7734425d9d17f096f81b4d3ba4e0176f13050a4
parent3641f1b52256b7eb289048d6b83e660fe4907aaf
dcerpc/udp: improve detection

Lately, Wireguard proto starting w pattern |04 00| is misdetected as
DCERPC/UDP which also starts with the same pattern, add more checks
to make sure that it is the best guess for packet to be dcerpc/udp.
rust/src/dcerpc/dcerpc_udp.rs