Skip to content

Detect integers 6644 v8#10175

Closed
catenacyber wants to merge 5 commits into
OISF:masterfrom
catenacyber:detect-integers-6644-v8
Closed

Detect integers 6644 v8#10175
catenacyber wants to merge 5 commits into
OISF:masterfrom
catenacyber:detect-integers-6644-v8

Conversation

@catenacyber
Copy link
Copy Markdown
Contributor

Link to redmine ticket:
https://redmine.openinfosecfoundation.org/issues/6644 and all subtickets
https://redmine.openinfosecfoundation.org/issues/6645
https://redmine.openinfosecfoundation.org/issues/6646
https://redmine.openinfosecfoundation.org/issues/6647
https://redmine.openinfosecfoundation.org/issues/6648
https://redmine.openinfosecfoundation.org/issues/6628

Describe changes:

  • detect/integers: support hexadecimal notation for parsing
  • detect/integers: add mode for negated range
  • detect/integers: rust derive for enumerations
  • detect/integers: keywords now accept bitmasks
  • doc: detect/integers

#10151 with passing cargo clippy on tests

catenacyber and others added 5 commits January 16, 2024 15:42
So that we can write enip.revision: 0x203

Ticket: 6645
Ticket: 6647

Allows keywords using integers to use strings in signature
parsing based on a rust enumeration with a derive.
Ticket: 6648

Like &0x40=0x40 to test for a specific bit set
Ticket: 6628

Document the generic detection capabilities for integer keywords.
and make every integer keyword pointing to this section.
@catenacyber catenacyber force-pushed the detect-integers-6644-v8 branch from 17f1408 to e957072 Compare January 16, 2024 14:42
This was referenced Jan 16, 2024
@catenacyber
Copy link
Copy Markdown
Contributor Author

Replaced by #10179

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant