]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
doc: add keywords to the multi-buffer-matching list
authorAlice Akaki <akakialice@gmail.com>
Mon, 24 Mar 2025 21:29:28 +0000 (17:29 -0400)
committerVictor Julien <victor@inliniac.net>
Thu, 27 Mar 2025 05:52:30 +0000 (06:52 +0100)
doc/userguide/rules/multi-buffer-matching.rst

index c7ed0ea3d67f19bde797368f58a94288b3bcbe01..e9d4c0f8e1f2200c334d7ccbf28d1517b1f15cdf 100644 (file)
@@ -74,6 +74,8 @@ not be met.
 Multiple buffer matching is currently enabled for use with the
 following keywords:
 
+* ``dns.answer.name``
+* ``dns.query.name``
 * ``dns.query``
 * ``file.data``
 * ``file.magic``
@@ -84,10 +86,20 @@ following keywords:
 * ``ike.vendor``
 * ``krb5_cname``
 * ``krb5_sname``
+* ``ldap.responses.dn``
+* ``ldap.responses.message``
 * ``mqtt.subscribe.topic``
 * ``mqtt.unsubscribe.topic``
 * ``quic.cyu.hash``
 * ``quic.cyu.string``
-* ``tls.certs``
+* ``sip.content_length``
+* ``sip.content_type``
+* ``sip.from``
+* ``sip.to``
+* ``sip.ua``
+* ``sip.via``
+* ``smtp.rcpt_to``
+* ``tls.alpn``
 * ``tls.cert_subject``
+* ``tls.certs``
 * ``tls.subjectaltname``