]> git.ipfire.org Git - thirdparty/suricata.git/commit
sig: add l3_proto keyword
authorEric Leblond <eric@regit.org>
Fri, 13 Jul 2012 13:46:02 +0000 (15:46 +0200)
committerVictor Julien <victor@inliniac.net>
Mon, 3 Sep 2012 14:14:37 +0000 (16:14 +0200)
commit71b4257bc23840c8dabdf598cb8ce1a02a54b129
treec63af14fa6986ecc07e5792c6d0f354cfc500ec2
parentfd7b6db22d224609617f5b3085057d83acf2ebbc
sig: add l3_proto keyword

This patch adds a l3_proto keyword to the signature language. It
can be used to specify if the signature has to match on IPv4, IPv6
or both. For example, one can write:
  alert http any any -> any 22 (msg: "HTTP v6"; l3_proto:ip6; sid:14;)

This should close #494.
src/Makefile.am
src/detect-l3proto.c [new file with mode: 0644]
src/detect-l3proto.h [new file with mode: 0644]
src/detect.c
src/detect.h