doc: document new dataset types

Feature: #5383
pull/8097/head
Eric Leblond 3 years ago committed by Victor Julien
parent 7518204ad4
commit 3599cbf1c4

@ -76,10 +76,10 @@ Syntax::
dataset:<cmd>,<name>,<options>; dataset:<cmd>,<name>,<options>;
dataset:<set|isset|isnotset>,<name> \ dataset:<set|isset|isnotset>,<name> \
[, type <string|md5|sha256>, save <file name>, load <file name>, state <file name>, memcap <size>, hashsize <size>]; [, type <string|md5|sha256|ipv4|ip>, save <file name>, load <file name>, state <file name>, memcap <size>, hashsize <size>];
type <type> type <type>
the data type: string, md5, sha256 the data type: string, md5, sha256, ipv4, ip
load <file name> load <file name>
file name for load the data when Suricata starts up file name for load the data when Suricata starts up
state state
@ -102,7 +102,7 @@ Data Reputation allows matching data against a reputation list.
Syntax:: Syntax::
datarep:<name>,<operator>,<value>, \ datarep:<name>,<operator>,<value>, \
[, load <file name>, type <string|md5|sha256>, memcap <size>, hashsize <size>]; [, load <file name>, type <string|md5|sha256|ipv4|ip>, memcap <size>, hashsize <size>];
Example rules could look like:: Example rules could look like::
@ -144,9 +144,9 @@ Syntax::
set name set name
Name of an already defined dataset Name of an already defined dataset
type type
Data type: string, md5, sha256 Data type: string, md5, sha256, ipv4, ip
data data
Data to add in serialized form (base64 for string, hex notation for md5/sha256) Data to add in serialized form (base64 for string, hex notation for md5/sha256, string representation for ipv4/ipv6)
Example adding 'google.com' to set 'myset':: Example adding 'google.com' to set 'myset'::
@ -165,9 +165,9 @@ Syntax::
set name set name
Name of an already defined dataset Name of an already defined dataset
type type
Data type: string, md5, sha256 Data type: string, md5, sha256, ipv4, ip
data data
Data to remove in serialized form (base64 for string, hex notation for md5/sha256) Data to remove in serialized form (base64 for string, hex notation for md5/sha256, string representation for ipv4/ipv6)
dataset-clear dataset-clear
~~~~~~~~~~~~~ ~~~~~~~~~~~~~
@ -227,6 +227,10 @@ md5
in the file as hex encoded string in the file as hex encoded string
sha256 sha256
in the file as hex encoded string in the file as hex encoded string
ipv4
in the file as string
ip
in the file as string, it can be IPv6 or IPv4 address (in standard notation or in IPv4 in IPv6 one)
dataset dataset

Loading…
Cancel
Save