You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/doc/userguide/rules
Alice Akaki 84605db01d detect: add ldap.responses.result_code
ldap.responses.result_code matches on LDAP result code
This keyword maps the following eve fields:
ldap.responses[].bind_response.result_code
ldap.responses[].search_result_done.result_code
ldap.responses[].modify_response.result_code
ldap.responses[].add_response.result_code
ldap.responses[].del_response.result_code
ldap.responses[].mod_dn_response.result_code
ldap.responses[].compare_response.result_code
ldap.responses[].extended_response.result_code
It is an unsigned 32-bit integer
Doesn't support prefiltering

Ticket: #7532
8 months ago
..
dataset-examples
dns-keywords
fast-pattern
flow-keywords
header-keywords
http-keywords
intro
normalized-buffers
payload-keywords
pcre
rule-types userguide: explain rule types and categorization 10 months ago
app-layer.rst
base64-keywords.rst
bypass-keyword.rst
config.rst
datasets.rst detect/datasets: implement unset command 1 year ago
dcerpc-keywords.rst
decode-layer.rst doc/decode-events: new: unknown event description 10 months ago
dhcp-keywords.rst
differences-from-snort.rst
dnp3-keywords.rst
dns-keywords.rst
enip-keyword.rst
fast-pattern-explained.rst
file-keywords.rst
flow-keywords.rst flow/pkts: allow matching on either direction 10 months ago
ftp-keywords.rst doc: Add ftp.command sticky buffer 10 months ago
header-keywords.rst doc: add note about big endian for icmp_seq match 1 year ago
http-keywords.rst
http2-keywords.rst http2: add frames support 1 year ago
ike-keywords.rst
index.rst doc/decode-events: new: unknown event description 10 months ago
integer-keywords.rst detect/integers: add support for negated strings when enum is used 9 months ago
intro.rst
ip-reputation-rules.rst
ipaddr.rst
ja-keywords.rst
kerberos-keywords.rst
ldap-keywords.rst detect: add ldap.responses.result_code 8 months ago
lua-detection.rst
meta.rst requires: support requires check for keyword 12 months ago
modbus-keyword.rst
mqtt-keywords.rst detect/mqtt: move keywords to rust 1 year ago
multi-buffer-matching.rst
nfs-keywords.rst
noalert.rst
payload-keywords.rst detect: absent keyword to test absence of sticky buffer 12 months ago
prefilter-keywords.rst
quic-keywords.rst
rfb-keywords.rst detect/rfb: move keywords to rust 1 year ago
rule-types.rst userguide: explain rule types and categorization 10 months ago
sip-keywords.rst doc: add new sip keywords 1 year ago
smb-keywords.rst
smtp-keywords.rst detect/smtp: smtp.rcpt_to keyword 10 months ago
snmp-keywords.rst
ssh-keywords.rst ssh: frames support 1 year ago
tag.rst
thresholding.rst doc/threshold: Threshold keyword clarifications 10 months ago
tls-keywords.rst
transforms.rst
vlan-keywords.rst detect: add vlan.layers keyword 10 months ago
websocket-keywords.rst
xbits.rst detect/ssh: remove deprecated keywords 1 year ago