Philippe Antoine
64f003190d
doc: move more rules to dedicated css container
...
Ticket: 8372
Also remove dead code from script checking the rules
3 months ago
Victor Julien
a1c4167d94
doc/userguide: add initial protocols overview
...
Explain per protocol mechanics for rule matching.
10 months ago
Philippe Antoine
dad424d74a
doc: multi-integers section for rules
...
Ticket: 7480
Describing the usage of index
10 months ago
Philippe Antoine
8757ad5fd3
detect/dns: support string for dns.rrtype
...
Ticket: 6723
1 year ago
Philippe Antoine
44a6f7f8ca
detect/dns: support string for dns.rcode
...
Ticket: 6723
1 year ago
Jason Ish
814e9ffb7a
dns: add keywords for additionals and authorities rrnames
...
Add keywords dns.additionals.rrname and dns.authorities.rrname. Along
the way, consolidate dns.query.name and dns.answer.name into a single file
and register them altogether since there is a lot of common code.
1 year ago
Jason Ish
a026293b42
dns: rename dns.response keyword to dns.response.rrname
...
This is a better name as the keyword is looking at all rrname type
fields in the response.
1 year ago
Nathan Scrivens
d3953dee8b
doc/userguide: document dns.response
...
Feature: 7012
1 year ago
Hadiqa Alamdar Bukhari
3aa313d0c5
dns: add dns.rcode keyword
...
dns.rcode matches the rcode header field in DNS messages
It's an unsigned integer
valid ranges = [0-15]
Does not support prefilter
Supports matches in both flow directions
Task #6621
2 years ago
Hadiqa Alamdar Bukhari
4b81851097
dns: add dns.rrtype keyword
...
It matches the rrtype field in DNS
It's an unsigned integer match
valid ranges = [0-65535]
Does not support prefilter
Supports flow in both directions
Feature #6666
2 years ago
Philippe Antoine
f6e1a20215
detect: dns.opcode as first-class integer
...
Ticket: 5446
That means it can accept ranges
2 years ago
Jason Ish
c1a8dbcb72
doc/userguide: document dns.query.name, dns.answer.name
...
With some other minor cleanups in the DNS keyword section.
3 years ago
jason taylor
c95fce39f0
doc: add multi buffer support note to keyword docs
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
3 years ago
Victor Julien
c0d9b3c078
doc/userguide: spelling
3 years ago
Jason Ish
d3e2cc9926
doc: document dns.opcode keyword
7 years ago
Jason Ish
daed788d49
doc: Replace dns_query with dns.query.
7 years ago
Victor Julien
0af562d4c8
doc: move parts out of snort difference doc
...
Move generic keyword descriptions to the keyword documentation.
9 years ago
Jason Ish
7f5ffeebad
doc: dns: sync up with wiki
10 years ago
Jason Ish
2751baae46
doc: rename from "sphinx" to "userguide"
10 years ago