Philippe Antoine
49aefe7093
ci: check for enum integer keywords
...
And generic documentation about it
Ticket: 8675
3 weeks ago
Philippe Antoine
c61f1cb6d0
detect/integers: rename index all1 to all
...
And all to all_or_absent
Ticket: 7929
12 months ago
Philippe Antoine
633180c93f
detect/integers: generalize support for bitflags modifier
...
Ticket: 6724
Allows sugar syntax for bitflags keywords.
While the expressivity does not increase, because we could already
use numerial values with all generic integer modes, this modifier
prefix is used with the strings, and follows the syntax
that is already used for fragbits and tcp.flags keyword.
1 year ago
Philippe Antoine
4b69a31dc3
detect/integers: count argument for multi-integers
...
Ticket: 7211
Allows to count the number of elements, without matching on
individual elements
1 year ago
Philippe Antoine
da486af881
detect: list-keywords cli shows integers
...
Ticket: 7875
1 year ago
Philippe Antoine
cb9ab951b9
detect/integers: subslice for multi-integers
1 year ago
Philippe Antoine
82f0e725a2
detect/integers: index or_absent and or_oob
...
To match if array is empty, or index is out of bounds
1 year ago
Philippe Antoine
1480cf47ab
detect/integers: nb index to match a specific number of times
...
For example
dns.rrtype: !A,nb>3
will match if we have more than 3 dns records which are not A
1 year ago
Philippe Antoine
6f848eeaaf
detect/integers: all1 index to match only on non-empty arrays
1 year ago
Philippe Antoine
dad424d74a
doc: multi-integers section for rules
...
Ticket: 7480
Describing the usage of index
1 year ago
Philippe Antoine
d0a513df6a
detect/integers: support kibibyte unit
...
Ticket: 7869
1 year ago
Philippe Antoine
be9858d3aa
detect/integers: document usage of units
...
Ticket: 7190
1 year ago
Alice Akaki
73455179d7
detect/integers: add support for negated strings when enum is used
...
function detect_parse_uint_enum can parse strings like !bind_request
Ticket: #7513
2 years ago
Juliana Fajardini
1860aa81e6
userguide: fix integer keyword matches list format
...
List wasn't being properly rendered.
2 years ago
Philippe Antoine
e22217bda8
doc: there is no right shift for integer bitmasks
...
Ticket: 6628
3 years ago
Philippe Antoine
b8bc2c7e0f
doc: integer keywords
...
Ticket: 6628
Document the generic detection capabilities for integer keywords.
and make every integer keyword pointing to this section.
3 years ago