Project

General

Profile

Actions

Documentation #5543

open

userguide: document which keywords accept the prefilter keyword

Added by Juliana Fajardini Reichow 4 months ago. Updated about 2 months ago.

Status:
New
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Using

$ suricata --list-keywords=all

will give a list of possible rules that feature prefilter.

For example:

tcp.mss:
Description: match on TCP MSS option field
Features: prefilter
Documentation: https://suricata.readthedocs.io/en/latest/rules/header-keywords.html#tcpmss


Related issues 1 (1 open0 closed)

Related to Optimization #5545: prefilter keyword: increase code coverageNewCommunity TicketActions
Actions

Also available in: Atom PDF