aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
master
main-7.0.x
master-6.0.x
master-5.0.x
master-4.1.x
master-4.0.x
master-3.2.x
suricata-8.0.0
suricata-7.0.11
suricata-8.0.0-rc1
suricata-8.0.0-beta1
suricata-7.0.10
suricata-7.0.9
suricata-7.0.8
suricata-7.0.7
suricata-7.0.6
suricata-6.0.20
suricata-7.0.5
suricata-6.0.19
suricata-6.0.18
suricata-7.0.4
suricata-6.0.17
suricata-7.0.3
suricata-6.0.16
suricata-7.0.2
suricata-6.0.15
suricata-7.0.1
suricata-6.0.14
suricata-7.0.0
suricata-7.0.0-rc2
suricata-6.0.13
suricata-6.0.12
suricata-6.0.11
suricata-7.0.0-rc1
suricata-6.0.10
suricata-6.0.9
suricata-7.0.0-beta1
suricata-6.0.8
suricata-6.0.7
suricata-6.0.6
suricata-5.0.10
suricata-6.0.5
suricata-5.0.9
suricata-6.0.4
suricata-5.0.8
suricata-6.0.3
suricata-5.0.7
suricata-6.0.2
suricata-5.0.6
suricata-6.0.1
suricata-5.0.5
suricata-4.1.10
suricata-4.1.9
suricata-5.0.4
suricata-6.0.0
suricata-6.0.0-rc1
suricata-6.0.0-beta1
suricata-5.0.3
suricata-4.1.8
suricata-4.1.7
suricata-5.0.2
suricata-4.1.6
suricata-5.0.1
suricata-5.0.0
suricata-5.0.0-rc1
suricata-4.1.5
suricata-5.0.0-beta1
suricata-4.1.4
suricata-4.1.3
suricata-4.0.7
suricata-4.1.2
suricata-4.1.1
suricata-4.1.0
suricata-4.0.6
suricata-4.1.0-rc2
suricata-4.1.0-rc1
suricata-4.0.5
suricata-4.1.0-beta1
suricata-4.0.4
suricata-4.0.3
suricata-4.0.2
suricata-3.2.5
suricata-4.0.1
suricata-3.2.4
suricata-4.0.0
suricata-4.0.0-rc2
suricata-3.2.3
suricata-4.0.0-rc1
suricata-4.0.0-beta1
suricata-3.2.2
suricata-3.1.4
suricata-3.2.1
suricata-3.2
suricata-3.2RC1
suricata-3.1.3
suricata-3.2beta1
suricata-3.1.2
suricata-3.1.1
suricata-3.1
suricata-3.0.2
suricata-3.1RC1
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0
suricata-2.0.11
suricata-3.0RC3
suricata-3.0RC2
suricata-3.0RC1
suricata-2.0.10
suricata-2.0.9
suricata-2.1beta4
suricata-2.0.8
suricata-2.0.7
suricata-2.1beta3
suricata-2.0.6
suricata-2.0.5
suricata-2.1beta2
suricata-2.0.4
suricata-2.1beta1
suricata-2.0.3
suricata-2.0.2
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0
suricata-2.0rc3
suricata-2.0rc2
suricata-2.0rc1
suricata-2.0beta2
suricata-1.4.7
suricata-1.4.6
suricata-1.4.5
suricata-2.0beta1
suricata-1.4.4
suricata-1.4.3
suricata-1.4.2
suricata-1.4.1
suricata-1.3.6
suricata-1.4
suricata-1.3.5
suricata-1.4rc1
suricata-1.3.4
suricata-1.4beta3
suricata-1.3.3
suricata-1.4beta2
suricata-1.3.2
suricata-1.4beta1
suricata-1.3.1
suricata-1.3
suricata-1.3rc1
suricata-1.3beta2
suricata-1.3beta1
suricata-1.2.1
suricata-1.2
suricata-1.2rc1
suricata-1.2beta1
suricata-1.1.1
suricata-0.8.2
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.0.3
suricata-1.0.4
suricata-1.0.5
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'ae10fc3de4'
${ noResults }
suricata/doc/userguide/rules
History
Philippe Antoine 4ec90bd227 detect: absent keyword to test absence of sticky buffer 
Ticket: 2224

It takes an argument to match only if the buffer is absent,
or it can still match if the buffer is present, but we test
the absence of some content.

For multi buffers, absent matches if there are 0 buffers.

For file keywords, absent matches if there is no file.
 		8 months ago
..
dataset-examples doc: add dataset examples 2 years ago
dns-keywords doc: rename from "sphinx" to "userguide" 9 years ago
fast-pattern doc: rename from "sphinx" to "userguide" 9 years ago
flow-keywords doc: fix spelling in flowbits image 5 years ago
header-keywords doc: Replace images of tables and rules with text in rules docs 8 years ago
http-keywords doc/userguide: update http keywords 5 years ago
intro doc: Replace images of tables and rules with text in rules docs 8 years ago
normalized-buffers doc: rename from "sphinx" to "userguide" 9 years ago
payload-keywords doc: Replace images of tables and rules with text in rules docs 8 years ago
pcre doc: Move pcre entirely to Payload Keywords section 8 years ago
app-layer.rst detect: add options to app-layer-protocol keyword 1 year ago
base64-keywords.rst doc/transform: Describe the from_base64 transform 1 year ago
bypass-keyword.rst doc/userguide: spelling 2 years ago
config.rst doc/rules: document config rule option 5 years ago
datasets.rst detect/datasets: implement unset command 10 months ago
dcerpc-keywords.rst doc/dcerpc: add proto keywords 4 years ago
dhcp-keywords.rst doc: integer keywords 2 years ago
differences-from-snort.rst lua: Remove luajit support 1 year ago
dnp3-keywords.rst doc: fix typo on example 6 years ago
dns-keywords.rst dns: add dns.rcode keyword 1 year ago
enip-keyword.rst enip: convert to rust 1 year ago
fast-pattern-explained.rst doc: remove references to prehistoric versions 2 years ago
file-keywords.rst doc: integer keywords 2 years ago
flow-keywords.rst userguide: clarify flow:stateless explanation 12 months ago
ftp-keywords.rst doc: update ftp keyword doc example rule format 2 years ago
header-keywords.rst doc: add note about big endian for icmp_seq match 10 months ago
http-keywords.rst doc: update normalization notes 1 year ago
http2-keywords.rst http2: add frames support 11 months ago
ike-keywords.rst doc: integer keywords 2 years ago
index.rst doc/userguide: add noalert/alert keyword docs 1 year ago
integer-keywords.rst userguide: fix integer keyword matches list format 9 months ago
intro.rst pop3: protocol detection 1 year ago
ip-reputation-rules.rst doc/userguide: document iprep isset/isnotset 1 year ago
ipaddr.rst doc: add reference to ipaddr in IP matching 3 years ago
ja-keywords.rst ja4: implement for TLS and QUIC 1 year ago
kerberos-keywords.rst doc: add multi buffer support note to keyword docs 2 years ago
lua-detection.rst doc: update lua sandbox docs for allowed packages/functions 1 year ago
meta.rst doc: note what version "requires" was added in 2 years ago
modbus-keyword.rst doc: spelling mistakes in various sections of the user guide 7 years ago
mqtt-keywords.rst detect/mqtt: move keywords to rust 1 year ago
multi-buffer-matching.rst doc: add description about tls.subjectaltname 1 year ago
nfs-keywords.rst doc: add file.name information to nfs keyword doc 2 years ago
noalert.rst doc/userguide: add noalert/alert keyword docs 1 year ago
payload-keywords.rst detect: absent keyword to test absence of sticky buffer 8 months ago
prefilter-keywords.rst doc: convert fancy quotes to straight quotes 6 years ago
quic-keywords.rst doc: add multi buffer support note to keyword docs 2 years ago
rfb-keywords.rst detect/rfb: move keywords to rust 12 months ago
sip-keywords.rst doc: add new sip keywords 10 months ago
smb-keywords.rst detect: update smb.version keyword 2 years ago
smtp-keywords.rst doc/userguide: fix rule container typo 1 year ago
snmp-keywords.rst detect/snmp: move keywords to rust 1 year ago
ssh-keywords.rst ssh: frames support 1 year ago
tag.rst doc/userguide: add tag keyword page 2 years ago
thresholding.rst doc/userguide: document threshold backoff type 1 year ago
tls-keywords.rst detect: add tls.alpn keyword 1 year ago
transforms.rst doc/transform: Correct typo 1 year ago
websocket-keywords.rst app-layer: websockets protocol support 1 year ago
xbits.rst detect/ssh: remove deprecated keywords 1 year ago