Snort mailing list archives

the snort3 how to support the suricata rules ? like this keywords?


From: 15135147016--- via Snort-devel <snort-devel () lists snort org>
Date: Tue, 2 Feb 2021 09:11:07 +0800


the snort3 how to support the suricata rules ? like this keywords?


Keyword
Legacy Content Modifier
Direction
http.urihttp_uriRequest
http.uri.rawhttp_raw_uriRequest
http.methodhttp_methodRequest
http.request_linehttp_request_line (*)Request
http.request_bodyhttp_client_bodyRequest
http.headerhttp_headerBoth
http.header.rawhttp_raw_headerBoth
http.cookiehttp_cookieBoth
http.user_agenthttp_user_agentRequest
http.hosthttp_hostRequest
http.host.rawhttp_raw_hostRequest
http.accepthttp_accept (*)Request
http.accept_langhttp_accept_lang (*)Request
http.accept_enchttp_accept_enc (*)Request
http.refererhttp_referer (*)Request
http.connectionhttp_connection (*)Request
http.content_typehttp_content_type (*)Both
http.content_lenhttp_content_len (*)Both
http.starthttp_start (*)Both
http.protocolhttp_protocol (*)Both
http.header_nameshttp_header_names (*)Both



15135147016 () 163 com
_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: