]> git.ipfire.org Git - thirdparty/suricata.git/commit
dns: add dns.rcode keyword 10603/head
authorHadiqa Alamdar Bukhari <hadiqaalamdar@gmail.com>
Wed, 24 Jan 2024 12:10:49 +0000 (17:10 +0500)
committerVictor Julien <victor@inliniac.net>
Sat, 9 Mar 2024 06:54:42 +0000 (07:54 +0100)
commit3aa313d0c5fdf33833508bc9b686f807188a5b9f
tree82eb084dccaa55325f882f58c373d236990028b8
parent7b2bef1bc6a1cdc85bca4d625157c8c931d2c905
dns: add dns.rcode keyword

dns.rcode matches the rcode header field in DNS messages
It's an unsigned integer
valid ranges = [0-15]
Does not support prefilter
Supports matches in both flow directions

Task #6621
doc/userguide/rules/dns-keywords.rst
rust/src/dns/detect.rs
src/Makefile.am
src/detect-dns-rcode.c [new file with mode: 0644]
src/detect-dns-rcode.h [new file with mode: 0644]
src/detect-engine-register.c
src/detect-engine-register.h