Snort mailing list archives
the snort3 how to support the suricata rules ? like this keywords?
From: 15135147016--- via Snort-devel <snort-devel () lists snort org>
Date: Tue, 2 Feb 2021 09:11:07 +0800
the snort3 how to support the suricata rules ? like this keywords? Keyword Legacy Content Modifier Direction http.urihttp_uriRequest http.uri.rawhttp_raw_uriRequest http.methodhttp_methodRequest http.request_linehttp_request_line (*)Request http.request_bodyhttp_client_bodyRequest http.headerhttp_headerBoth http.header.rawhttp_raw_headerBoth http.cookiehttp_cookieBoth http.user_agenthttp_user_agentRequest http.hosthttp_hostRequest http.host.rawhttp_raw_hostRequest http.accepthttp_accept (*)Request http.accept_langhttp_accept_lang (*)Request http.accept_enchttp_accept_enc (*)Request http.refererhttp_referer (*)Request http.connectionhttp_connection (*)Request http.content_typehttp_content_type (*)Both http.content_lenhttp_content_len (*)Both http.starthttp_start (*)Both http.protocolhttp_protocol (*)Both http.header_nameshttp_header_names (*)Both 15135147016 () 163 com
_______________________________________________ Snort-devel mailing list Snort-devel () lists snort org https://lists.snort.org/mailman/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Bug in alert_syslog module? W. Michael Petullo (Jan 31)
- Re: Bug in alert_syslog module? Michael Altizer (mialtize) via Snort-devel (Feb 01)
- the snort3 how to support the suricata rules ? like this keywords? 15135147016--- via Snort-devel (Feb 02)
- Re: the snort3 how to support the suricata rules ? like this keywords? Joel Esler (jesler) via Snort-devel (Feb 02)
- Re: the snort3 how to support the suricata rules ? like this keywords? Joel Esler (jesler) via Snort-devel (Feb 02)
- the snort3 how to support the suricata rules ? like this keywords? 15135147016--- via Snort-devel (Feb 02)
- Re: Bug in alert_syslog module? Michael Altizer (mialtize) via Snort-devel (Feb 01)