Project

General

Profile

Actions
Copy link

Feature #742

closed
AS VJ

startswith keyword

Feature #742: startswith keyword

Added by Anoop Saldanha about 13 years ago. Updated about 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
4.1beta1
Effort:
Difficulty:
Label:

Description

Just like endswith keyword from feature 741.

Related issues 2 (1 open — 1 closed)

Related to Suricata - Feature #741: Introduce endswith keywordClosedVictor JulienActions
Related to Suricata - Task #2309: SuriCon 2017 brainstormAssignedVictor JulienActions

VJ Updated by Victor Julien about 13 years ago Actions
Copy link
 #2

Whats the use case?

Isn't this handled by content:"abc"; depth:3;?

AS Updated by Anoop Saldanha about 13 years ago Actions
Copy link
 #3

It can, but this is neater, just like in case of endswith. In fact internally I am replacing startswith with a depth, and endswith with a isdataat.

VJ Updated by Victor Julien over 12 years ago Actions
Copy link
 #4

  • Status changed from New to Assigned
  • Target version changed from TBD to 2.0rc2

VJ Updated by Victor Julien about 12 years ago Actions
Copy link
 #5

  • Target version changed from 2.0rc2 to 3.0RC2

VJ Updated by Victor Julien almost 11 years ago Actions
Copy link
 #6

  • Target version changed from 3.0RC2 to TBD

AH Updated by Andreas Herz over 9 years ago Actions
Copy link
 #7

  • Assignee changed from Anoop Saldanha to OISF Dev

VJ Updated by Victor Julien over 8 years ago Actions
Copy link
 #8

VJ Updated by Victor Julien over 8 years ago Actions
Copy link
 #9

  • Related to Task #2309: SuriCon 2017 brainstorm added

VJ Updated by Victor Julien over 8 years ago Actions
Copy link
 #10

  • Assignee changed from OISF Dev to Victor Julien
  • Target version changed from TBD to 70

VJ Updated by Victor Julien about 8 years ago Actions
Copy link
 #11

  • Status changed from Assigned to Closed
  • Target version changed from 70 to 4.1beta1
Actions
Copy link

Also available in: PDF Atom