diff --git a/doc/userguide/upgrade.rst b/doc/userguide/upgrade.rst index fd6e27501047..345087fe55b3 100644 --- a/doc/userguide/upgrade.rst +++ b/doc/userguide/upgrade.rst @@ -38,6 +38,19 @@ Upgrading 7.0 to 8.0 -------------------- .. note:: ``stats.whitelist`` has been renamed to ``stats.score`` in ``eve.json`` +Major changes +~~~~~~~~~~~~~ +- SIP parser has been updated to inspect traffic carried by TCP as well. + SIP keywords can still match on their respective fields in addition + to these improvements. + Transactions are logged with the same schema regardless of which + transport protocol is carrying the payload. + Also, SIP protocol is detected using pattern matching and not only + probing parser. +- ``SIP_PORTS`` variable has been introduced in suricata.yaml +- Application layer's ``sip`` counter has been split into ``sip_tcp`` and ``sip_udp`` + for the ``stats`` event. + Upgrading 6.0 to 7.0 --------------------