ipv4 or ipv6 only rules
Instead of "alert ip" allow for "alert ipv4" and "alert ip4". Likewise for IPv6.
Interesting question is how this should behave wrt address vars. If HOME_NET contains both ip4 and ip6, how should a rule like "alert ipv4 $HOME_NET..." behave? Error out? Use only the ipv4 part of the addresses?
Updated by Eric Leblond about 7 years ago
- File 0001-sig-Add-ipv6-and-ipv4-to-list-of-protocols.patch 0001-sig-Add-ipv6-and-ipv4-to-list-of-protocols.patch added
- File 0002-sig-add-l3_proto-keyword.patch 0002-sig-add-l3_proto-keyword.patch added
Adding the patches to the ticket.