Project

General

Profile

Actions

Feature #2142

closed

filesize: support other units than only bytes

Added by Mikael Keri over 4 years ago. Updated almost 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

The "filesize" keyword supports bytes today.

It would be nice if other units were supported as well (e.g: MB, GB)

Reference: https://suricata.readthedocs.io/en/latest/rules/file-keywords.html#filesize

Actions #1

Updated by Victor Julien over 4 years ago

  • Status changed from New to Assigned
  • Assignee set to Andreas Herz
  • Target version set to 70

Should be easy if done with ParseSizeStringU32 or similar.

Actions #3

Updated by Victor Julien almost 4 years ago

  • Status changed from Assigned to Closed
  • Target version changed from 70 to 4.1beta1
Actions

Also available in: Atom PDF