Project

General

Profile

Actions
Copy link

Feature #7507

closed
VJ JL

rules: ftp.completion_code keyword

Feature #7507: rules: ftp.completion_code keyword

Added by Victor Julien about 1 year ago. Updated 11 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
8.0.0-rc1
Effort:
Difficulty:
Label:

Description

Match on the tracked completion code (eve's ftp.completion_code)

Related issues 3 (1 open — 2 closed)

Blocks Suricata - Task #6476: ftp: parity of logging and detection buffersIn ProgressJeff LucovskyActions
Copied from Suricata - Feature #7506: rules: ftp.reply_received keywordClosedJeff LucovskyActions
Copied to Suricata - Feature #7508: rules: ftp.reply keywordClosedJeff LucovskyActions
Actions
Copy link

Also available in: PDF Atom