You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/doc/userguide/rules
Philippe Antoine 633180c93f detect/integers: generalize support for bitflags modifier
Ticket: 6724

Allows sugar syntax for bitflags keywords.
While the expressivity does not increase, because we could already
use numerial values with all generic integer modes, this modifier
prefix is used with the strings, and follows the syntax
that is already used for fragbits and tcp.flags keyword.
1 year ago
..
dataset-examples
…
dns-keywords
…
fast-pattern
…
flow-keywords
…
header-keywords
…
http-keywords
…
intro
…
normalized-buffers
…
payload-keywords
…
pcre
…
rule-types userguide: explain rule types and categorization 2 years ago
app-layer.rst doc/devguide: document app-layer protocol detection 1 year ago
base64-keywords.rst detect: limit base64_decode `bytes` to 64KiB 2 years ago
bypass-keyword.rst doc: Update bypass docs to use new keyword format 2 years ago
config.rst detect/config: add flow tracking doc 1 year ago
datasets.rst doc/userguide: enrichment_key is now context_key 1 year ago
dcerpc-keywords.rst doc/userguide: add initial protocols overview 1 year ago
decode-layer.rst decode/etag: ETag 802.1BR decoder 1 year ago
dhcp-keywords.rst
…
differences-from-snort.rst
…
dnp3-keywords.rst detect/integers: generalize support for bitflags modifier 1 year ago
dns-keywords.rst doc/userguide: add initial protocols overview 1 year ago
email-keywords.rst detect: add email.body_md5 keyword 1 year ago
enip-keyword.rst
…
fast-pattern-explained.rst
…
file-keywords.rst doc/userguide: add initial protocols overview 1 year ago
flow-keywords.rst userguide: document how suricata processes rules 1 year ago
ftp-keywords.rst doc/ftp: Document ftp.completion_code sticky buffer 1 year ago
header-keywords.rst detect: add tcp.wscale keyword 1 year ago
http-keywords.rst doc/userguide: add initial protocols overview 1 year ago
http2-keywords.rst detect: http2.errorcode is now a generic integer 1 year ago
ike-keywords.rst
…
index.rst doc/rules/index: keep rule types doc near the end 1 year ago
integer-keywords.rst detect/integers: generalize support for bitflags modifier 1 year ago
intro.rst doc/userguide: link to protocol details from transactional rules 1 year ago
ip-reputation-rules.rst
…
ipaddr.rst
…
ja-keywords.rst doc/userguide: add initial protocols overview 1 year ago
kerberos-keywords.rst detect/krb5: move krb5_msg_type to rust 1 year ago
ldap-keywords.rst doc: multi-integers section for rules 1 year ago
lua-detection.rst doc/lua-detection: fix example script; remove most buffers 1 year ago
mdns-keywords.rst mdns: add mdns parser, logger and detection 1 year ago
meta.rst doc/rules/internals: minor fixes 1 year ago
modbus-keyword.rst
…
mqtt-keywords.rst detect/integers: generalize support for bitflags modifier 1 year ago
multi-buffer-matching.rst detect: list-keywords cli shows multi-buffers 1 year ago
nfs-keywords.rst detect/nfs: move nfs_procedure to rust 1 year ago
noalert.rst
…
payload-keywords.rst detect/entropy: Clarify when entropy is logged 1 year ago
pgsql-keywords.rst pgsql: add query keyword 1 year ago
prefilter-keywords.rst
…
quic-keywords.rst
…
rfb-keywords.rst detect/rfb: move keywords to rust 2 years ago
rule-types.rst doc: adjust for master to main rename 1 year ago
rules-internals.rst doc/rules/internals: minor fixes 1 year ago
sdp-keywords.rst doc/sdp: fix doc to match real keywords names 2 years ago
sip-keywords.rst doc: add new sip keywords 2 years ago
smb-keywords.rst doc/userguide: add initial protocols overview 1 year ago
smtp-keywords.rst detect/smtp: smtp.rcpt_to keyword 2 years ago
snmp-keywords.rst detect/snmp: pdu_type keyword now accepts strings 1 year ago
ssh-keywords.rst doc: fix typo and missing newline in rules/ssh_keywords. 1 year ago
tag.rst
…
thresholding.rst doc/threshold: Threshold keyword clarifications 2 years ago
tls-keywords.rst doc/userguide: add initial protocols overview 1 year ago
transforms.rst doc/from_base64: Emphasize keyword only values 1 year ago
vlan-keywords.rst detect: add vlan.layers keyword 2 years ago
websocket-keywords.rst detect/integers: generalize support for bitflags modifier 1 year ago
xbits.rst doc/userguide: add xbits tx scope support 1 year ago