15 Commits (0024de5e9ee868143916dabe82058c52ca2f9330)

Author	SHA1	Message	Date
Philippe Antoine	0024de5e9e	src: new file detect-engine-buffer.h ... Taken from detect-engine.h so that we can bindgen this smaller unit.	2 years ago
Philippe Antoine	808f8a877a	detect/multi-buf: helper with more explicit direction	2 years ago
Philippe Antoine	8ecc3efdc8	detect/multi-buf: harmonize wrapper ... Introduce DetectGetMultiData which does the generic wrapping, including the transforms. And let each keyword do just the getter.	2 years ago
Philippe Antoine	96afdce283	detect: rename SCSigTableElmt to SCSigTableAppLiteElmt	2 years ago
Alice Akaki	bda0890834	detect: add email.received keyword ... email.received matches on MIME EMAIL Received This keyword maps to the EVE field email.received[] It is a sticky buffer Supports multiple buffer matching Supports prefiltering Ticket: #7599	2 years ago
Alice Akaki	ca429ef5e3	detect: add email.url keyword ... email.url matches on URLs extracted from an email This keyword maps to the EVE field email.url[] Supports multiple buffer matching Supports prefiltering Ticket: #7597	2 years ago
Jeff Lucovsky	22ea5ddbb7	detect/transforms: Add engine detect thread ctx to signature ... Modify the transform function signature to include the detect engine thread ctx.	2 years ago
Alice Akaki	341369f203	detect: add email.x_mailer keyword ... email.x_mailer matches on MIME EMAIL X-Mailer This keyword maps to the EVE field email.x_mailer It is a sticky buffer Supports prefiltering Ticket: #7598	2 years ago
Alice Akaki	52e12410ed	detect: add email.message_id keyword ... email.message_id matches on MIME EMAIL Message-Id This keyword maps to the EVE field email.message_id It is a sticky buffer Supports prefiltering Ticket: #7593	2 years ago
Alice Akaki	ce2e7aed74	detect: add email.date keyword ... email.date matches on MIME EMAIL DATE This keyword maps to the EVE field email.date It is a sticky buffer Supports prefiltering Ticket: #7591	2 years ago
Alice Akaki	7ba4ebdc2c	detect: add email.cc keyword ... email.cc matches on MIME EMAIL Carbon Copy This keyword maps to the EVE field email.cc[] It is a sticky buffer Supports prefiltering Ticket: #7588	2 years ago
Alice Akaki	9c3c6cf4cc	detect-email.c: don't return NULL for empty buffer ... Just return NULL if tx->mime_state is NULL or if SCDetectMimeEmailGetData return 0 Fixes: 09db7c7 ("detect: add mime email.subject keyword") 90aab0d ("detect: add email.from")	2 years ago
Alice Akaki	5d6a072e35	detect: add email.to keyword ... email.to matches on MIME EMAIL TO This keyword maps to the EVE field email.to[] It is a sticky buffer Supports prefiltering Ticket: #7596	2 years ago
Alice Akaki	09db7c7ac1	detect: add mime email.subject keyword ... email.subject matches on MIME EMAIL SUBJECT This keyword maps to the EVE field email.subject It is a sticky buffer Supports prefiltering Ticket: #7595	2 years ago
Alice Akaki	90aab0d62f	detect: add email.from ... email.from matches on MIME EMAIL FROM This keyword maps to the EVE field email.from It is a sticky buffer Supports prefiltering Ticket: #7592	2 years ago