Project

General

Profile

Actions

Feature #6644

open

tracking: detect: integer as first-class support

Added by Philippe Antoine 4 months ago. Updated about 2 months ago.

Status:
In Progress
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Subtasks 7 (2 open5 closed)

Documentation #6628: userguide: document generic aspects of integer keywordsClosedPhilippe AntoineActions
Feature #6645: detect: integer parsed with hexadecimal notationClosedPhilippe AntoineActions
Feature #6646: detect: integer: support negated rangesClosedPhilippe AntoineActions
Feature #6647: detect: integers: support for enumerationsClosedPhilippe AntoineActions
Feature #6648: detect: integer: support bitmasksClosedPhilippe AntoineActions
Feature #6723: detect: review existing keywords for usage of enumerationsNewPhilippe AntoineActions
Feature #6724: detect: review existing keywords for usage of bitflagsNewPhilippe AntoineActions

Related issues 1 (0 open1 closed)

Related to Suricata - Feature #5446: allow ranges in dns.opcode valueClosedPhilippe AntoineActions
Actions #1

Updated by Philippe Antoine 4 months ago

  • Subtask #6628 added
Actions #2

Updated by Philippe Antoine 4 months ago

  • Subtask #6645 added
Actions #3

Updated by Philippe Antoine 4 months ago

  • Subtask #6646 added
Actions #4

Updated by Philippe Antoine 4 months ago

  • Subtask #6647 added
Actions #5

Updated by Philippe Antoine 4 months ago

  • Subtask #6648 added
Actions #6

Updated by Philippe Antoine 4 months ago

Also when #6647 and #6648 are done, check for existing keywords to move their implementations to integers (like http2.frame_type)

Actions #7

Updated by Philippe Antoine 4 months ago

  • Status changed from New to In Review
  • Target version changed from TBD to 8.0.0-beta1
Actions #8

Updated by Philippe Antoine 3 months ago

  • Subtask #6723 added
Actions #9

Updated by Philippe Antoine 3 months ago

  • Subtask #6724 added
Actions #10

Updated by Philippe Antoine 3 months ago

  • Related to Feature #5446: allow ranges in dns.opcode value added
Actions #11

Updated by Philippe Antoine about 2 months ago

  • Status changed from In Review to In Progress
Actions

Also available in: Atom PDF