]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
eve-parity: skip transform keywords 12717/head
authorJason Ish <jason.ish@oisf.net>
Fri, 21 Feb 2025 20:58:47 +0000 (14:58 -0600)
committerVictor Julien <victor@inliniac.net>
Wed, 5 Mar 2025 14:59:58 +0000 (15:59 +0100)
scripts/eve-parity.py

index 07b25ebf6fbd93f44161b2ba638a45dfcaadaa13..7599f7f60d427edb565eb7ee1e7524208fce8e19 100755 (executable)
@@ -139,6 +139,10 @@ def load_known_keywords():
     for line in lines[1:]:
         parts = line.split(";")
         if parts:
+            # Skip transforms.
+            if len(parts) > 3 and parts[3].find("transform") > -1:
+                continue
+
             keywords.add(parts[0])
     return keywords