Actions
Feature #735
closed
AS
VJ
Introduce content_len keyword
Feature #735:
Introduce content_len keyword
Effort:
Difficulty:
Label:
Description
Add support for the content_len keyword.
Can be used as -
conten_len:<op>,<no>;
where,
op - >, <, >=, <=, = ,!=,
no - unsigned integer
The content_len can be modified by the http_* modifiers.
For example,
content:"index"; http_uri; content_len:=,8; http_uri;
If no modifier is used, it would match on the packet payload length(which is the same as dsize)
Suggestions, comments?
Actions