Suricata

I would like to work on this ticket, should i just assign it to myself?

also am not sure how to represent the negation detail of tcp-window.

jb_set_bool(js, "negation", wd->negated);

thats what am thinking

Nancy Enos wrote in #note-4:

I would like to work on this ticket, should i just assign it to myself?

Hi, yes, please feel free to assign it to yourself.

also am not sure how to represent the negation detail of tcp-window.

jb_set_bool(js, "negation", wd->negated);

thats what am thinking

Checking some suricata-verify tests that have keywords that allow for negation, I see that we usually use negated, so I would go with that:

jb_set_bool(js, "negated", wd->negated);