You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/doc/userguide/rules
Philippe Antoine 32d0bd2bbb detect: limit base64_decode `bytes` to 64KiB
Ticket: 7613

Avoids potential large per-thread memory allocation. A buffer with the
size of the largest decode_base64 buffer size setting would be allocated
per thread. As this was a u32, it could mean a per-thread 4GiB memory
allocation.

64KiB was already the built-in default for cases where bytes size wasn't
specified.
2 years ago
..
dataset-examples doc: add dataset examples 4 years ago
dns-keywords
fast-pattern
flow-keywords
header-keywords
http-keywords
intro
normalized-buffers
payload-keywords
pcre
rule-types userguide: explain rule types and categorization 2 years ago
app-layer.rst detect: add options to app-layer-protocol keyword 2 years ago
base64-keywords.rst detect: limit base64_decode `bytes` to 64KiB 2 years ago
bypass-keyword.rst doc/userguide: spelling 3 years ago
config.rst
datasets.rst detect/datasets: implement unset command 2 years ago
dcerpc-keywords.rst
decode-layer.rst doc/decode-events: new: unknown event description 2 years ago
dhcp-keywords.rst doc: integer keywords 3 years ago
differences-from-snort.rst lua: Remove luajit support 2 years ago
dnp3-keywords.rst
dns-keywords.rst dns: add keywords for additionals and authorities rrnames 2 years ago
enip-keyword.rst enip: convert to rust 2 years ago
fast-pattern-explained.rst doc: remove references to prehistoric versions 3 years ago
file-keywords.rst doc: integer keywords 3 years ago
flow-keywords.rst flow/pkts: allow matching on either direction 2 years ago
ftp-keywords.rst doc: Add ftp.command sticky buffer 2 years ago
header-keywords.rst userguide/header-keywords: fix typos, adjust format 2 years ago
http-keywords.rst doc: update normalization notes 2 years ago
http2-keywords.rst http2: add frames support 2 years ago
ike-keywords.rst doc: integer keywords 3 years ago
index.rst doc/decode-events: new: unknown event description 2 years ago
integer-keywords.rst detect/integers: add support for negated strings when enum is used 2 years ago
intro.rst pop3: protocol detection 2 years ago
ip-reputation-rules.rst doc/userguide: document iprep isset/isnotset 2 years ago
ipaddr.rst doc: add reference to ipaddr in IP matching 4 years ago
ja-keywords.rst ja4: implement for TLS and QUIC 2 years ago
kerberos-keywords.rst doc: add multi buffer support note to keyword docs 3 years ago
ldap-keywords.rst detect: add ldap.responses.message 2 years ago
lua-detection.rst doc: update lua sandbox docs for allowed packages/functions 2 years ago
meta.rst requires: support requires check for keyword 2 years ago
modbus-keyword.rst
mqtt-keywords.rst detect/mqtt: move keywords to rust 2 years ago
multi-buffer-matching.rst doc: add description about tls.subjectaltname 2 years ago
nfs-keywords.rst doc: add file.name information to nfs keyword doc 3 years ago
noalert.rst doc/userguide: add noalert/alert keyword docs 2 years ago
payload-keywords.rst detect: absent keyword to test absence of sticky buffer 2 years ago
prefilter-keywords.rst
quic-keywords.rst doc: add multi buffer support note to keyword docs 3 years ago
rfb-keywords.rst detect/rfb: move keywords to rust 2 years ago
rule-types.rst doc/rule-types: remove trailing underscore 2 years ago
sip-keywords.rst doc: add new sip keywords 2 years ago
smb-keywords.rst detect: update smb.version keyword 3 years ago
smtp-keywords.rst detect/smtp: smtp.rcpt_to keyword 2 years ago
snmp-keywords.rst detect/snmp: move keywords to rust 2 years ago
ssh-keywords.rst ssh: frames support 2 years ago
tag.rst doc/userguide: add tag keyword page 3 years ago
thresholding.rst doc/threshold: Threshold keyword clarifications 2 years ago
tls-keywords.rst detect: add tls.alpn keyword 2 years ago
transforms.rst doc/transform: Correct typo 2 years ago
vlan-keywords.rst detect: add vlan.layers keyword 2 years ago
websocket-keywords.rst app-layer: websockets protocol support 2 years ago
xbits.rst detect/ssh: remove deprecated keywords 2 years ago