Philippe Antoine
254ba73e65
detect/transforms: add zlib_deflate transform
...
Ticket: 7846
(cherry picked from commit 539e4ee665 )
5 months ago
Philippe Antoine
609a289e46
detect/transforms: add gunzip transform
...
Ticket: 7846
(cherry picked from commit dbea660729 )
5 months ago
Jeff Lucovsky
8e75f21e4f
doc/luaxform: Clarify luaxform calling convention
...
Issue: 8135
Clarify the calling convention for the Lua transform's `transform`
function.
(cherry picked from commit 845544aad3 )
7 months ago
Jeff Lucovsky
9fa7756ba7
doc/luaxform: Remove init function from example
...
Issue: 8035
The `luaxform` transform doesn't support the `init` function. This
commit removes that from the example and clarifies how functions in the
Lua script are used.
(cherry picked from commit b02d9bb4f1 )
8 months ago
Jeff Lucovsky
21707ab26c
doc/from_base64: Emphasize keyword only values
...
Emphasize that specifying the keyword only will result in the defaults
for each option to be used.
Issue: 7853
11 months ago
Jeff Lucovsky
53c8a0f8f1
doc: Document luaxform transform
...
Issue: 2290
1 year ago
Eric Leblond
ed20e7cfe4
doc/userguide: doc domain and tld transforms
1 year ago
Jeff Lucovsky
01e20c91fb
doc/transform: Correct typo
2 years ago
Jeff Lucovsky
d205ff82d0
doc/transform: Describe the from_base64 transform
...
Issue: 6487
Document the new transform and indicate that it's the preferred way to
perform base64 decoding (preferred over base64_decode)
2 years ago
Philippe Antoine
adf5e6da7b
detect: strip_pseudo_headers transform
...
Ticket: 6546
3 years ago
Philippe Antoine
32cce122e1
detect: header_lowercase transform
...
Ticket: 6290
3 years ago
Jeff Lucovsky
9ee55d2394
doc/transform: Document case-changing transforms.
...
Issue: 6439
3 years ago
Philippe Antoine
0cfdec1266
detect: xor transform
...
Ticket: 3285
The xor transform applies xor decoding to a buffer, with a key
specified as an option in hexadecimal. Arbitrary key sizes are
accepted.
5 years ago
Jason Ish
547afcb983
doc/userguide/transforms: remove not about libnss being required
6 years ago
Philippe Antoine
1569f3e349
transform: adds url_decode keyword
...
Fixes https://redmine.openinfosecfoundation.org/issues/2689
Adds a new source file to handle this keyword.
And modifies documentation, Makefile, and registration accordingly.
url_decode decodes url-encoded data, ie replacing '+' with space
and '%HH' with its value.
6 years ago
Jeff Lucovsky
3005dca3fd
doc: pcrexform documentation
6 years ago
Victor Julien
6aa2d550a1
doc/dotprefix: fix example rules
7 years ago
Jeff Lucovsky
ab3d6328ba
detect/transform: add dotprefix keyword to doc
7 years ago
Victor Julien
eb73008ccf
detect/transform: add to_sha1 keyword
8 years ago
Victor Julien
75f9c1ae9f
detect/transform: add to_md5 keyword
8 years ago
Victor Julien
72dd4a5f92
doc/rules: initial transforms documentation
8 years ago