Project

General

Profile

Translated addresses and ports » History » Version 1

Vérène Houdebine, 11/04/2015 06:12 PM

1 1 Vérène Houdebine
h1. Translated addresses and ports
2 1 Vérène Houdebine
3 1 Vérène Houdebine
*Aim* : 
4 1 Vérène Houdebine
5 1 Vérène Houdebine
Offer a way to identify translated addresses and ports.
6 1 Vérène Houdebine
7 1 Vérène Houdebine
*Description* : 
8 1 Vérène Houdebine
9 1 Vérène Houdebine
Most formats offer a way to specify whether a given address or port is pre or post translation. IDMEF doesn't offer this possibility because the translation process is younger than IDMEF. However, since translation has become a common practice, it appears to be absolutely necessary to include this information in the format.
10 1 Vérène Houdebine
11 1 Vérène Houdebine
30/10/2015 Meeting : This information is necessary. In order to avoid adding too much fields, we could use the category field from the class address and update the related dictionnary.
12 1 Vérène Houdebine
13 1 Vérène Houdebine
*Comments* :
14 1 Vérène Houdebine
15 1 Vérène Houdebine
_GH_ : We could use Address.category