Project

General

Profile

Actions
Copy link

Feature #6648

closed

Feature #6644: tracking: detect: integer as first-class support

detect: integer: support bitmasks

Added by Philippe Antoine 4 months ago. Updated 3 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

Bitflags/Bitstrings are just an integer where numerical comparison does not make sense

But we should add an operator & with two values : a mask, and a value to compare.
This would allow to check for a set of flags and their values

Related issues 1 (1 open — 0 closed)

Related to Suricata - Feature #6724: detect: review existing keywords for usage of bitflagsNewPhilippe AntoineActions
Actions
Copy link
 #1

Updated by Philippe Antoine 4 months ago

  • Status changed from New to In Review
  • Target version changed from TBD to 8.0.0-beta1
Actions
Copy link
 #2

Updated by Philippe Antoine 3 months ago

  • Status changed from In Review to Closed
Actions
Copy link
 #3

Updated by Philippe Antoine 3 months ago

  • Related to Feature #6724: detect: review existing keywords for usage of bitflags added
Actions
Copy link

Also available in: Atom PDF