Shivani Bhardwaj
700eebaecc
doc/conf: Update copyright and regex for version
...
Make the new regex in compliance with the modern autoconf syntax.
Closes redmine ticket #3423
5 years ago
jason taylor
1666bc0ad1
doc: minor capitalization fix
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
5 years ago
jason taylor
4f7dc4f136
doc: add bsize documentation and rule example
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
5 years ago
Daisu
fccdb1c642
doc/commandline: -i option is useable several times
5 years ago
Steven Hostetler
4ac5ab00b7
doc/install: fix geoip typo
5 years ago
Victor Julien
411dd69e92
doc/eve: layout and formatting fixes
5 years ago
Jason Williams
55a36c79ff
doc: update http keywords documentation
5 years ago
jason taylor
95237f9894
docs: update datasets examples
...
Signed-off-by: jason taylor <jtfas90@gmail.com>
5 years ago
EmilienCourt
50bb8d4cb2
doc: fix typo on example
...
Quotes have been forgotten in the dnp3.data example, which throws an
SC_ERR_INVALID_SIGNATURE(39) if used like in the example.
5 years ago
Eric Leblond
9ef2f81ee7
doc/userguide: fix typo
5 years ago
Eric Leblond
821d590f5b
doc/userguide: fix base64 example
...
Add a sticky buffer example and fix the content modifier one.
5 years ago
Pascal Delalande
8e6a2bd42e
doc: removal of disable-rust and path typo for suricatasc
5 years ago
Victor Julien
d5ae68afc2
doc: fix version in install doc
5 years ago
Victor Julien
1c27a99827
doc: add upgrade page
5 years ago
Jason Ish
718fcbb682
doc: document eve/dns v2 as the default
...
Adds eve/dns v2 format documentation. Update legacy format
to require the version field.
5 years ago
Philippe Antoine
6921608673
http: updates suricata.yaml comments
...
As well as the userguide documentation about suricata.yaml
5 years ago
Jason Ish
9111b9df57
doc: cleanup enging logging
...
Attempt cleanup the engine logging a bit.
Also a include a verbatim excerpt of the default configuration
here for reference purposes.
5 years ago
Jason Ish
c97195bf0b
doc: -v verbose option documentation update
...
Update -v documentation to reflect the new behaviour discussed
in bug #1851 where -v changes the log level to fixed levels
instead of an offset of the default log level configured
in suricata.yaml.
5 years ago
Konstantin Klinger
808ea0dba9
app-layer: remove obsolete msn protocol detection
5 years ago
Victor Julien
6d2bd6607e
datasets: make clear the feature is experimental
5 years ago
Jeff Lucovsky
17c3e22ecd
doc/eve.alert: Expand metadata description
5 years ago
Victor Julien
4061bf5ceb
doc/datasets: update example config to map
5 years ago
Victor Julien
029683cbac
doc: reformat linux ips guide
5 years ago
Eric Leblond
6d9416148b
doc: add nftables IPS configuration
5 years ago
Eric Leblond
82eb669205
doc: information about scaling AF_PACKET IPS mode
5 years ago
Eric Leblond
ffe81dc9f2
doc: add info about AF_PACKET IPS
...
Based on https://home.regit.org/2012/09/new-af_packet-ips-mode-in-suricata/
Also fix some typo in Netfilter setup.
5 years ago
Jason Ish
0cd5452194
doc: mark independent json loggers as deprecated
...
This is the loggers such as alert-json-log, dns-json-log, etc.
They are not even referenced in the default configuration file,
and are easily replaced with multiple eve instances.
5 years ago
Jason Ish
212252faf2
doc/drop.log: mark as deprecated and scheduled to be removed
...
Also make sure options are in sync with those in
suricata.yaml.
5 years ago
Jason Ish
5345379d14
doc/unified2: add deprecation/removal notice
5 years ago
Jason Ish
873bc290bc
doc/filestore(v1) - make deprecation text a note
...
Highlights that is is deprecated in the HTML output.
5 years ago
Jason Ish
7f32822843
doc/filestore(v1) - document force-filestore field
5 years ago
Jeff Lucovsky
44a59b78c7
doc/anomaly Remove event_no
5 years ago
Victor Julien
be6cdd37f8
stream: remove fix stream.depth references
5 years ago
Peter Manev
10819ed892
doc: Update tuning considerations doc
5 years ago
Peter Manev
6df1001957
doc: Update high performance config doc
5 years ago
Victor Julien
bd2f1e15fd
doc/stats: minor clarrifications on 5.0 defaults
5 years ago
Victor Julien
42438ec08e
doc/userguide: add quickstart to dist
5 years ago
Giuseppe Longo
dd5d0afd79
doc: add SIP keywords
5 years ago
Jason Ish
d3e2cc9926
doc: document dns.opcode keyword
5 years ago
Jason Ish
daed788d49
doc: Replace dns_query with dns.query.
5 years ago
Giuseppe Longo
972be0a560
doc: update file-extraction section
5 years ago
Travis Green
798d874662
doc: fix whitespace
5 years ago
Victor Julien
6aa2d550a1
doc/dotprefix: fix example rules
5 years ago
Jeff Lucovsky
ab3d6328ba
detect/transform: add dotprefix keyword to doc
5 years ago
Victor Julien
df325d63ea
doc/eve.anomaly: fix indent and general formatting
5 years ago
Jeff Lucovsky
075592b66f
doc: Simplified anomaly configuration settings
5 years ago
Jeff Lucovsky
aaacbf28c2
logging/anomaly: Support configuration filter types
5 years ago
Eric Leblond
35bc73e4e2
doc: change eBPF directory path
5 years ago
Zach Kelly
caef8b5b38
protocol parser: rdp
...
Initial implementation of feature 2314:
1. Add protocol parser for RDP
2. Add transactions for RDP negotiation
3. Add eve logging of transactions
5 years ago
Andreas Herz
d657fd9bf0
doc: add quickstart guide
5 years ago