Project

General

Profile

Actions

Feature #5561

closed

Support metadata matching

Added by Jason Ish about 2 years ago. Updated about 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

The idea is to allow matching based on metadata (without regular expressions). Some syntax like:

metadata: performance_impact == significant

Not sure if that works for modify.conf, but gets the idea across.

Actions #1

Updated by Jason Ish about 2 years ago

  • Status changed from New to In Review

First cut: https://github.com/OISF/suricata-update/pull/320

Doesn't support modify.conf yet.

Actions #2

Updated by Jason Ish about 2 years ago

  • Status changed from In Review to Closed
  • Target version changed from 1.3.0 to 1.2.6

Merged to master and master-1.2.x.

Actions #3

Updated by Jason Ish about 2 years ago

  • Assignee changed from OISF Dev to Jason Ish
Actions

Also available in: Atom PDF