Project

General

Profile

Actions
Copy link

Documentation #7580

open
JF OD

userguide: add section for negated content

Documentation #7580: userguide: add section for negated content

Added by Juliana Fajardini Reichow about 1 year ago. Updated 7 months ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

We mention negated content and matches in a few places (for instance, in the "Differences from Snort" chapter), but no specific section for others to refer to if searching about it.

We should have one, and cross-reference with the absent keyword docs.

Related issues 1 (0 open — 1 closed)

Related to Suricata - Bug #2224: rules: negated http_* match returns false if buffer not populatedClosedPhilippe AntoineActions
Actions
Copy link

Also available in: PDF Atom