Project

General

Profile

Actions

Documentation #4980

open

Feature #4174: tracking: app-layer frame inspection support

doc/frames: document frame rule keyword

Added by Victor Julien over 2 years ago. Updated about 1 month ago.

Status:
In Progress
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Related issues 1 (1 open0 closed)

Related to Suricata - Documentation #4705: userguide: add sections about frame supportNewVictor JulienActions
Actions #1

Updated by Juliana Fajardini Reichow over 2 years ago

  • Status changed from Assigned to In Progress
Actions #3

Updated by Juliana Fajardini Reichow over 2 years ago

Actions #4

Updated by Victor Julien about 2 years ago

  • Target version changed from 7.0.0-beta1 to 7.0.0-rc1
Actions #5

Updated by Victor Julien almost 2 years ago

  • Assignee changed from Juliana Fajardini Reichow to Victor Julien
Actions #6

Updated by Juliana Fajardini Reichow over 1 year ago

  • Target version changed from 7.0.0-rc1 to 7.0.0-rc2
Actions #7

Updated by Juliana Fajardini Reichow over 1 year ago

  • Tracker changed from Feature to Documentation
  • Target version changed from 7.0.0-rc2 to 7.0.0
Actions #8

Updated by Victor Julien over 1 year ago

  • Target version changed from 7.0.0 to 7.0.1
Actions #9

Updated by Victor Julien about 1 year ago

  • Assignee changed from Victor Julien to OISF Dev
Actions #10

Updated by Victor Julien about 1 year ago

  • Target version changed from 7.0.1 to 7.0.2
Actions #11

Updated by Victor Julien 12 months ago

  • Target version changed from 7.0.2 to 7.0.3
Actions #12

Updated by Victor Julien 11 months ago

  • Target version changed from 7.0.3 to 8.0.0-beta1
Actions #13

Updated by Philippe Antoine about 1 month ago

  • Assignee changed from OISF Dev to Juliana Fajardini Reichow

Juliana, what is left to do here ? There is already some doc...

Actions #14

Updated by Juliana Fajardini Reichow about 1 month ago

I got stuck back then when trying to create good frame rules, as we wanted to have good examples, then other tasks with higher priority got in the way.

I think we could/should try to get an initial version of docs in, and then add a ticket to improve rule examples etc. Mauybe I could take from where I left here (cf https://github.com/OISF/suricata/pull/7059#issuecomment-1176179128) and try to get said first version merged...

Better having something, than barely anything.

Actions

Also available in: Atom PDF