Philippe Antoine
c61f1cb6d0
detect/integers: rename index all1 to all
...
And all to all_or_absent
Ticket: 7929
9 months ago
Philippe Antoine
633180c93f
detect/integers: generalize support for bitflags modifier
...
Ticket: 6724
Allows sugar syntax for bitflags keywords.
While the expressivity does not increase, because we could already
use numerial values with all generic integer modes, this modifier
prefix is used with the strings, and follows the syntax
that is already used for fragbits and tcp.flags keyword.
10 months ago
Philippe Antoine
4b69a31dc3
detect/integers: count argument for multi-integers
...
Ticket: 7211
Allows to count the number of elements, without matching on
individual elements
10 months ago
Philippe Antoine
da486af881
detect: list-keywords cli shows integers
...
Ticket: 7875
11 months ago
Philippe Antoine
cb9ab951b9
detect/integers: subslice for multi-integers
11 months ago
Philippe Antoine
82f0e725a2
detect/integers: index or_absent and or_oob
...
To match if array is empty, or index is out of bounds
11 months ago
Philippe Antoine
1480cf47ab
detect/integers: nb index to match a specific number of times
...
For example
dns.rrtype: !A,nb>3
will match if we have more than 3 dns records which are not A
11 months ago
Philippe Antoine
6f848eeaaf
detect/integers: all1 index to match only on non-empty arrays
11 months ago
Philippe Antoine
dad424d74a
doc: multi-integers section for rules
...
Ticket: 7480
Describing the usage of index
11 months ago
Philippe Antoine
d0a513df6a
detect/integers: support kibibyte unit
...
Ticket: 7869
11 months ago
Philippe Antoine
be9858d3aa
detect/integers: document usage of units
...
Ticket: 7190
11 months ago
Alice Akaki
73455179d7
detect/integers: add support for negated strings when enum is used
...
function detect_parse_uint_enum can parse strings like !bind_request
Ticket: #7513
2 years ago
Juliana Fajardini
1860aa81e6
userguide: fix integer keyword matches list format
...
List wasn't being properly rendered.
2 years ago
Philippe Antoine
e22217bda8
doc: there is no right shift for integer bitmasks
...
Ticket: 6628
2 years ago
Philippe Antoine
b8bc2c7e0f
doc: integer keywords
...
Ticket: 6628
Document the generic detection capabilities for integer keywords.
and make every integer keyword pointing to this section.
3 years ago