Actions
Bug #13794
closedSuricata - when adding a new interface the latest app-layer protocol decoders are not default enabled on the new interface
Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Suricata
Target version:
-
Start date:
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Affected Version:
2.7.0
Affected Plus Version:
23.01
Affected Architecture:
All
Description
When adding a new interface to an existing Suricata installation, the most recently supported app-layer protocol decoders for ENIP, RDP, HTTP2, SIP, SNMP, RFB, and MQTT are not automatically added and enabled. These should be added and enabled by default on a new interface. The user can manually disable any of them desired by altering the setting on the APP PARSERS tab.
Actions