Feature #2287
closed
force lowercase on dns_query buffer
Added by Jason Williams over 6 years ago.
Updated over 6 years ago.
Description
Suricata currently forces lowercase on http_host, should lowercase also be applied here?
I worry about breaking existing rules. Perhaps a new keyword makes sense 'dns_query_name' or something. There we could do this.
We had a meeting and agreed this buffer should be caseful. This feature request can be closed.
- Status changed from New to Rejected
- Priority changed from Low to Normal
If we do a new variant of this keyword we can revisit.
Also available in: Atom
PDF