suricata icon indicating copy to clipboard operation
suricata copied to clipboard

detect: absent keyword to test absence of sticky buffer

Open catenacyber opened this issue 1 week ago • 1 comments

Link to redmine ticket: https://redmine.openinfosecfoundation.org/issues/2224

Describe changes:

  • detect: adds absent keyword to match on absent buffer

SV_BRANCH=https://github.com/OISF/suricata-verify/pull/1942

https://github.com/OISF/suricata/pull/11301 with use of SIGMATCH_OPTIONAL_OPT

catenacyber avatar Jun 27 '24 09:06 catenacyber