Project

General

Profile

Actions
Copy link

Feature #6723

open

Task #6644: tracking: detect: integer as first-class support

detect: review existing keywords for usage of enumerations

Added by Philippe Antoine 6 months ago. Updated 7 days ago.

Status:
In Progress
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

Follow up on #6647

http2.error_code and alike

Related issues 3 (0 open — 3 closed)

Related to Suricata - Feature #6647: detect: integers: support for enumerationsClosedPhilippe AntoineActions
Related to Suricata - Feature #5446: allow ranges in dns.opcode valueClosedPhilippe AntoineActions
Related to Suricata - Task #4683: detect: remove sigmatch_table in favor of a dynamic storage optionClosedPhilippe AntoineActions
Actions
Copy link
 #1

Updated by Philippe Antoine 6 months ago

  • Related to Feature #6647: detect: integers: support for enumerations added
Actions
Copy link
 #2

Updated by Philippe Antoine 6 months ago

Also review for generic integer usage like #5446

Actions
Copy link
 #3

Updated by Philippe Antoine 6 months ago

  • Related to Feature #5446: allow ranges in dns.opcode value added
Actions
Copy link
 #4

Updated by Philippe Antoine 3 months ago

quick note : snmp pdu is not so easy to get this, because we use the enum of an external crate

Actions
Copy link
 #5

Updated by Philippe Antoine about 2 months ago

  • Related to Task #4683: detect: remove sigmatch_table in favor of a dynamic storage option added
Actions
Copy link
 #6

Updated by Philippe Antoine about 1 month ago

MQTTTypeCode is good for this

We should handle negation of known strings in detect_parse_uint_enum

Actions
Copy link
 #7

Updated by Philippe Antoine 10 days ago

Actions
Copy link
 #8

Updated by Philippe Antoine 10 days ago

  • Status changed from New to In Progress
Actions
Copy link
 #9

Updated by Philippe Antoine 7 days ago

  • Target version changed from TBD to 8.0.0-beta1

This is done progressively for each protocol as pat of the rustification of keywords

Actions
Copy link

Also available in: Atom PDF