Project

General

Profile

Actions
Copy link

Feature #2142

closed

filesize: support other units than only bytes

Added by Mikael Keri almost 7 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Andreas Herz
Target version:
4.1beta1
Effort:
Difficulty:
Label:

Description

The "filesize" keyword supports bytes today.

It would be nice if other units were supported as well (e.g: MB, GB)

Reference: https://suricata.readthedocs.io/en/latest/rules/file-keywords.html#filesize

Actions
Copy link
 #1

Updated by Victor Julien almost 7 years ago

  • Status changed from New to Assigned
  • Assignee set to Andreas Herz
  • Target version set to 70

Should be easy if done with ParseSizeStringU32 or similar.

Actions
Copy link
 #3

Updated by Victor Julien over 6 years ago

  • Status changed from Assigned to Closed
  • Target version changed from 70 to 4.1beta1
Actions
Copy link

Also available in: Atom PDF