You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/doc/userguide
Victor Julien 07738af868 detect/content: introduce startswith modifier
Add startswith modifier to simplify matching patterns at the start
of a buffer.

Instead of:
    content:"abc"; depth:3;
This enables:
    content:"abc"; startswith;

Especially with longer patterns this makes the intention of the rule
more clear and eases writing the rules.

Internally it's simply a shorthand for 'depth:<pattern len>;'.

Ticket https://redmine.openinfosecfoundation.org/issues/742
7 years ago
..
_static
capture-hardware
configuration
file-extraction
licenses
manpages
output
partials
performance
reputation
rule-management
rules detect/content: introduce startswith modifier 7 years ago
setting-up-ipsinline-for-linux
.gitignore
Makefile.am
Makefile.sphinx
README.md
acknowledgements.rst
command-line-options.rst
conf.py
convert.py
index.rst
initscripts.rst
install.rst
make-sense-alerts.rst
public-data-sets.rst
setting-up-ipsinline-for-linux.rst
unix-socket.rst
what-is-suricata.rst

README.md

Suricata User Guide

This directory contains the Suricata Guide. The Sphinx Document Generate is used to build the documentation. For a primer os reStructuredText see the reStructuredText Primer.

Development Server

To help with writing documentation there is a development web server with live reload. To get run the live server you will first need npm installed then run the following:

npm install
gulp serve

Then point your browser at http://localhost:8000/_build/html/index.html

Any edits to .rst files should trigger a "make html" and cause your browser to refresh.