mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
07738af868
Add startswith modifier to simplify matching patterns at the start
of a buffer.
Instead of:
content:"abc"; depth:3;
This enables:
content:"abc"; startswith;
Especially with longer patterns this makes the intention of the rule
more clear and eases writing the rules.
Internally it's simply a shorthand for 'depth:<pattern len>;'.
Ticket https://redmine.openinfosecfoundation.org/issues/742
|
7 years ago | |
|---|---|---|
| .. | ||
| dns-keywords | ||
| fast-pattern | ||
| flow-keywords | ||
| header-keywords | 7 years ago | |
| http-keywords | 7 years ago | |
| intro | 7 years ago | |
| normalized-buffers | ||
| payload-keywords | 7 years ago | |
| pcre | 7 years ago | |
| app-layer.rst | 8 years ago | |
| differences-from-snort.rst | 7 years ago | |
| dnp3-keywords.rst | 8 years ago | |
| dns-keywords.rst | 8 years ago | |
| enip-keyword.rst | 8 years ago | |
| fast-pattern-explained.rst | 8 years ago | |
| file-keywords.rst | 7 years ago | |
| flow-keywords.rst | 7 years ago | |
| ftp-keywords.rst | 7 years ago | |
| header-keywords.rst | 7 years ago | |
| http-keywords.rst | 7 years ago | |
| index.rst | 7 years ago | |
| intro.rst | 7 years ago | |
| ip-reputation-rules.rst | 7 years ago | |
| meta.rst | 7 years ago | |
| modbus-keyword.rst | ||
| payload-keywords.rst | 7 years ago | |
| prefilter-keywords.rst | 7 years ago | |
| rule-lua-scripting.rst | ||
| thresholding.rst | 7 years ago | |
| tls-keywords.rst | 7 years ago | |
| xbits.rst | 7 years ago | |