Project

General

Profile

Actions

Feature #7672

open

detect/transforms: subslice transform

Added by Philippe Antoine about 1 month ago. Updated 4 days ago.

Status:
New
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Many keyword use offset and bytes

We could make it more generic with a subslice transform that would take a subslice of a sticky buffer

like http.uri; subslice: [2: -2]; content: "toto";

Need to think about all the expressivity we want (negative indexing, relative ? etc...)

Actions #1

Updated by Philippe Antoine about 1 month ago

  • Tracker changed from Bug to Feature
Actions #2

Updated by Jeff Lucovsky 5 days ago ยท Edited

I'd prefer to support:
  • bytes
    Number of bytes to slice
  • offset
    Where to begin the slice
Actions #3

Updated by Philippe Antoine 4 days ago

Jeff Lucovsky wrote in #note-2:

I'd prefer to support:
  • [...] Number of bytes to slice
  • [...] Where to begin the slice

Fine for me

I do not care so much about the syntax than about the expressivity (like negative indexing to start from the end)

Actions

Also available in: Atom PDF