]> git.ipfire.org Git - thirdparty/suricata.git/commit
projects / thirdparty / suricata.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5a5b481) | patch
pgsql: add query keyword 13331/head
authorJuliana Fajardini <jufajardini@oisf.net>
Sun, 25 May 2025 21:58:40 +0000 (18:58 -0300)
committerVictor Julien <victor@inliniac.net>
Wed, 28 May 2025 17:08:07 +0000 (19:08 +0200)
commit404bb53ce96564cbf964bb1e513a6107b7f744dc
treebd3e5a6b530d21c4c09bb75248fd7ab4723b17fftree
parent5a5b48179a7ac7a14e77b693774bc74fa35f7c16commit | diff
pgsql: add query keyword

Add the `pgsql.query` rule keyword to match on PGSQL's query
request message contents. This currently matches on the EVE field:

pgsql.request.simple_query

`pgsql.query` is a sticky buffer and can be used as a fast_pattern.

Task #6259
doc/userguide/rules/index.rst diff | blob | blame | history
doc/userguide/rules/pgsql-keywords.rst [new file with mode: 0644] blob
rust/src/pgsql/detect.rs [new file with mode: 0644] blob
rust/src/pgsql/mod.rs diff | blob | blame | history
rust/src/pgsql/pgsql.rs diff | blob | blame | history
src/detect-engine-register.c diff | blob | blame | history
Mirror of https://github.com/OISF/suricata.git