Project

General

Profile

Actions

Feature #742

closed

startswith keyword

Added by Anoop Saldanha almost 12 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Just like endswith keyword from feature 741.


Related issues 2 (1 open1 closed)

Related to Suricata - Feature #741: Introduce endswith keywordClosedVictor Julien01/31/2013Actions
Related to Suricata - Task #2309: SuriCon 2017 brainstormAssignedVictor JulienActions
Actions #2

Updated by Victor Julien almost 12 years ago

Whats the use case?

Isn't this handled by content:"abc"; depth:3;?

Actions #3

Updated by Anoop Saldanha almost 12 years ago

It can, but this is neater, just like in case of endswith. In fact internally I am replacing startswith with a depth, and endswith with a isdataat.

Actions #4

Updated by Victor Julien about 11 years ago

  • Status changed from New to Assigned
  • Target version changed from TBD to 2.0rc2
Actions #5

Updated by Victor Julien almost 11 years ago

  • Target version changed from 2.0rc2 to 3.0RC2
Actions #6

Updated by Victor Julien over 9 years ago

  • Target version changed from 3.0RC2 to TBD
Actions #7

Updated by Andreas Herz about 8 years ago

  • Assignee changed from Anoop Saldanha to OISF Dev
Actions #8

Updated by Victor Julien almost 7 years ago

Actions #9

Updated by Victor Julien almost 7 years ago

  • Related to Task #2309: SuriCon 2017 brainstorm added
Actions #10

Updated by Victor Julien almost 7 years ago

  • Assignee changed from OISF Dev to Victor Julien
  • Target version changed from TBD to 70
Actions #11

Updated by Victor Julien over 6 years ago

  • Status changed from Assigned to Closed
  • Target version changed from 70 to 4.1beta1
Actions

Also available in: Atom PDF