suricata

Commit Graph

Author	SHA1	Message	Date
Victor Julien	61a7f47a69	detect: add ether.hdr keyword Sticky buffer to inspect the ethernet header. Example rule: alert ether any any -> any any ( \ ether.hdr; content:"\|08 06\|"; offset:12; depth:2; \ sid:1;) Ticket: #8327.	4 months ago
Victor Julien	fe3cce895c	doc/userguide: add igmp keyword docs	5 months ago
Victor Julien	7e6fd09e90	doc/userguide: add missing ipopts values	5 months ago
Philippe Antoine	d94aea8331	detect: tcp.window is now a generic integer Ticket: 7889	8 months ago
Philippe Antoine	68bb783e97	detect: tcp.seq is now a generic integer Ticket: 7889	8 months ago
Philippe Antoine	ed907bbd78	detect: tcp.ack is now a generic integer Ticket: 7889	8 months ago
Philippe Antoine	7a8eb28cae	detect: id is now a generic integer Ticket: 7889	8 months ago
Philippe Antoine	bff7413488	detect: icmp_seq is now a generic integer Ticket: 7889	8 months ago
Philippe Antoine	79e66f76e6	detect: icmp_id is now a generic integer Ticket: 7889	8 months ago
Philippe Antoine	09531447d1	detect: fragoffset is now a generic integer Ticket: 7889	8 months ago
Philippe Antoine	d8cb00e795	detect/tcp: make tcp.flags a generic integer with bitflags Ticket: 6724 Allows to use numerical values for example Also fixes some unit tests that were returning 1 after goto error FlagsTestParse05 especially took this path as de->ignored_flags != (TH_SYN\|TH_RST) was false we had de->ignored_flags == 0xff ^ (TH_SYN\|TH_RST) And then, we had a match, instead of what the not-run code was supposing.	9 months ago
Philippe Antoine	1f9236a6d8	detect/ipv4: make fragbits a generic uint16 bitflags keyword Ticket: 6724 Allows to use numerical values	9 months ago
Victor Julien	ecbcccf355	detect: add tcp.wscale keyword Allows matching on wscale option value in TCP header options. Ticket: #7713.	1 year ago
Juliana Fajardini	d8523d9d97	userguide/header-keywords: fix typos, adjust format	1 year ago
jason taylor	f46a8776ec	doc: add note about big endian for icmp_seq match	2 years ago
Philippe Antoine	b8bc2c7e0f	doc: integer keywords Ticket: 6628 Document the generic detection capabilities for integer keywords. and make every integer keyword pointing to this section.	3 years ago
Travis Green	96a0e7016f	doc: add tcp flags documentation Signed-off-by: jason taylor <jtfas90@gmail.com>	3 years ago
Victor Julien	c0d9b3c078	doc/userguide: spelling	3 years ago
jason taylor	9dc8fffe05	userguide: update tos keyword information Signed-off-by: jason taylor <jtfas90@gmail.com>	4 years ago
jason taylor	1d9b91a987	userguide: update fragoffset keyword information Signed-off-by: jason taylor <jtfas90@gmail.com>	4 years ago
jason taylor	7c73144988	userguide: update fragbits information Signed-off-by: jason taylor <jtfas90@gmail.com>	4 years ago
jason taylor	4be9793e36	userguide: update geoip information Signed-off-by: jason taylor <jtfas90@gmail.com>	4 years ago
jason taylor	e8eba6e4a1	userguide: update id keyword information Signed-off-by: jason taylor <jtfas90@gmail.com>	4 years ago
jason taylor	cfd0da133e	userguide: update ipv6.hdr keyword information Signed-off-by: jason taylor <jtfas90@gmail.com>	4 years ago
jason taylor	150a04b597	userguide: update ipv4.hdr keyword information Signed-off-by: jason taylor <jtfas90@gmail.com>	4 years ago
jason taylor	298f59c2ba	userguide: update ip_proto keyword information Signed-off-by: jason taylor <jtfas90@gmail.com>	4 years ago
jason taylor	6226492976	userguide: update sameip keyword information Signed-off-by: jason taylor <jtfas90@gmail.com>	4 years ago
jason taylor	f97ba44339	userguide: update ipopts keyword information Signed-off-by: jason taylor <jtfas90@gmail.com>	4 years ago
jason taylor	9b4e6e5802	userguide: update ttl keyword information Signed-off-by: jason taylor <jtfas90@gmail.com>	4 years ago
Jeff Lucovsky	a18a9d3046	doc: New sticky buffer icmpv4.hdr	6 years ago
Jeff Lucovsky	5e4aa5b851	doc: Improve tos description This commit improves the description of the `tos` keyword by emphasizing that the value used should adhere to the guidelines in RFC2474. Instead of specifying the DSCP value directly, right shift the DSCP value and use that.	6 years ago
Philippe Antoine	6251deae21	doc: adds doc for ipv4.hdr signature keyword	6 years ago
Philippe Antoine	1cd314c500	detect: adds icmpv6.mtu keyword	6 years ago
Philippe Antoine	8396333493	detect: adds icmpv6.hdr keyword	6 years ago
Philippe Antoine	af1361a988	doc: add missing documentation for ipv6.hdr keyword	6 years ago
Travis Green	798d874662	doc: fix whitespace	7 years ago
Eric Leblond	08397e07f1	doc: fix typos in geoip doc	7 years ago
Eric Leblond	0d5608bab2	doc: fix display of icmp code and type array	7 years ago
Eric Leblond	0c84591afe	doc: use a table to list direction filter in geoip	7 years ago
Eric Leblond	c01cadbade	doc: fix geoip syntax Spaces are not allowed before country code.	7 years ago
Bill Meeks	a291209e47	detect/geoip: migrate to GeoIP2 database format Issue #2765	7 years ago
Victor Julien	034555644b	doc: add tcp.hdr and udp.hdr	7 years ago
Victor Julien	a01df4b86b	doc: document tcp.mss keyword	7 years ago
Andreas Herz	30fd80b0ef	doc: convert fancy quotes to straight quotes	7 years ago
Travis Green	c2adb9e669	doc: added tos keyword Redmine issue: https://redmine.openinfosecfoundation.org/issues/2583	8 years ago
Pascal Delalande	4f48927c44	doc: spelling mistakes in various sections of the user guide	8 years ago
Ralph Broenink	196ba1da70	doc: Make the header keywords section separate sections in ToC	9 years ago
Ralph Broenink	3413793768	doc: Use lowercased keyword names as section titles	9 years ago
Ralph Broenink	a52aacb4ea	doc: Replace images of tables and rules with text in rules docs In some chapters of the rules documentation, many sections used examples of rules, but these were inserted into images. These have been replaced by text and HTML emphasis. Additionally, some tables embedded into images were also replaced by reST tables.	9 years ago
Abbed	320b032a88	doc: small typo under '4.3.1.5' section	9 years ago

1 2

54 Commits (3564f2f92885e856bffa7d3a54db431c70805756)