aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

doc: replace 'eve' with 'EVE' in the LDAP keywords documentation

Browse Source
pull/12653/head
Alice Akaki 5 months ago committed by Victor Julien
parent 7b350e9933
commit 31ee18b5be
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File

6
doc/userguide/rules/ldap-keywords.rst
Unescape Escape View File

@ -52,7 +52,7 @@ Syntax::
ldap.request.operation uses :ref:`unsigned 8-bit integer <rules-integer-keywords>`. ldap.request.operation uses :ref:`unsigned 8-bit integer <rules-integer-keywords>`.
This keyword maps to the eve field ``ldap.request.operation`` This keyword maps to the EVE field ``ldap.request.operation``
Examples Examples
^^^^^^^^ ^^^^^^^^
@ -79,7 +79,7 @@ Syntax::
ldap.responses.operation uses :ref:`unsigned 8-bit integer <rules-integer-keywords>`. ldap.responses.operation uses :ref:`unsigned 8-bit integer <rules-integer-keywords>`.
This keyword maps to the eve field ``ldap.responses[].operation`` This keyword maps to the EVE field ``ldap.responses[].operation``
An LDAP request operation can receive multiple responses. By default, the ldap.responses.operation An LDAP request operation can receive multiple responses. By default, the ldap.responses.operation
keyword matches all indices, but it is possible to specify a particular index for matching keyword matches all indices, but it is possible to specify a particular index for matching
@ -147,7 +147,7 @@ It can be matched exactly, or compared using the ``op`` setting::
ldap.responses.count uses :ref:`unsigned 32-bit integer <rules-integer-keywords>`. ldap.responses.count uses :ref:`unsigned 32-bit integer <rules-integer-keywords>`.
This keyword maps to the eve field ``len(ldap.responses[])`` This keyword maps to the EVE field ``len(ldap.responses[])``
Examples Examples
^^^^^^^^ ^^^^^^^^

Write Preview
Loading…
Cancel
Save