Project

General

Profile

Actions
Copy link

Documentation #4980

open

Feature #4174: tracking: app-layer frame inspection support

doc/frames: document frame rule keyword

Added by Victor Julien almost 3 years ago. Updated 3 months ago.

Status:
In Progress
Priority:
Normal
Assignee:
Juliana Fajardini Reichow
Target version:
8.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Related issues 1 (1 open — 0 closed)

Related to Suricata - Documentation #4705: userguide: add sections about frame supportNewVictor JulienActions
Actions
Copy link
 #1

Updated by Juliana Fajardini Reichow almost 3 years ago

  • Status changed from Assigned to In Progress
Actions
Copy link
 #3

Updated by Juliana Fajardini Reichow over 2 years ago

Actions
Copy link
 #4

Updated by Victor Julien about 2 years ago

  • Target version changed from 7.0.0-beta1 to 7.0.0-rc1
Actions
Copy link
 #5

Updated by Victor Julien about 2 years ago

  • Assignee changed from Juliana Fajardini Reichow to Victor Julien
Actions
Copy link
 #6

Updated by Juliana Fajardini Reichow almost 2 years ago

  • Target version changed from 7.0.0-rc1 to 7.0.0-rc2
Actions
Copy link
 #7

Updated by Juliana Fajardini Reichow over 1 year ago

  • Tracker changed from Feature to Documentation
  • Target version changed from 7.0.0-rc2 to 7.0.0
Actions
Copy link
 #8

Updated by Victor Julien over 1 year ago

  • Target version changed from 7.0.0 to 7.0.1
Actions
Copy link
 #9

Updated by Victor Julien over 1 year ago

  • Assignee changed from Victor Julien to OISF Dev
Actions
Copy link
 #10

Updated by Victor Julien about 1 year ago

  • Target version changed from 7.0.1 to 7.0.2
Actions
Copy link
 #11

Updated by Victor Julien about 1 year ago

  • Target version changed from 7.0.2 to 7.0.3
Actions
Copy link
 #12

Updated by Victor Julien about 1 year ago

  • Target version changed from 7.0.3 to 8.0.0-beta1
Actions
Copy link
 #13

Updated by Philippe Antoine 3 months ago

  • Assignee changed from OISF Dev to Juliana Fajardini Reichow

Juliana, what is left to do here ? There is already some doc...

Actions
Copy link
 #14

Updated by Juliana Fajardini Reichow 3 months ago

I got stuck back then when trying to create good frame rules, as we wanted to have good examples, then other tasks with higher priority got in the way.

I think we could/should try to get an initial version of docs in, and then add a ticket to improve rule examples etc. Mauybe I could take from where I left here (cf https://github.com/OISF/suricata/pull/7059#issuecomment-1176179128) and try to get said first version merged...

Better having something, than barely anything.

Actions
Copy link

Also available in: Atom PDF