]> git.ipfire.org Git - thirdparty/suricata.git/commit
suppress: support ip-lists
authorVictor Julien <victor@inliniac.net>
Wed, 10 Jun 2015 12:20:21 +0000 (14:20 +0200)
committerVictor Julien <victor@inliniac.net>
Mon, 15 Jun 2015 09:16:35 +0000 (11:16 +0200)
commite85a44c383d6790e96b84c4420cc477ef4cecd98
treea7477e08c82450806e9a76d659c96514b20b29d6
parent26fc5682ad7b2f48d5db1d6c561ed1f228ed7cbc
suppress: support ip-lists

Ticket: 1137

Support supplying a list of IP's to the suppress keyword. Variables from
the address-groups and negation is supported. The same logic (and code) is
used that is also used in parting the IP portions of regular detection
rules.
src/detect-engine-threshold.c
src/detect-threshold.c
src/detect-threshold.h
src/util-threshold-config.c