-
Notifications
You must be signed in to change notification settings - Fork 1.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Detect integers 6644 v12 #10234
Detect integers 6644 v12 #10234
Conversation
So that we can write enip.revision: 0x203 Ticket: 6645
Ticket: 6647 Allows keywords using integers to use strings in signature parsing based on a rust enumeration with a derive.
Ticket: 6648 Like &0x40=0x40 to test for a specific bit set
Ticket: 6628 Document the generic detection capabilities for integer keywords. and make every integer keyword pointing to this section.
Information: ERROR: QA failed on SURI_TLPW1_files_sha256.
Pipeline 17729 |
Why is CI using libhtp 0.5.45 and not 0.5.x ? |
CI uses |
@@ -6,6 +6,8 @@ dhcp.leasetime | |||
|
|||
DHCP lease time (integer). | |||
|
|||
dhcp.leasetime uses an :ref:`unsigned 64-bits integer <rules-integer-keywords>`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
64-bits
or 64-bit
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Without an s if I believe
16-bit integers are those that are 16 bits (2 octets) wide.
Fixing that
|
||
/// Enum trait that will be implemented on enums that | ||
/// derive StringEnum. | ||
pub trait Enum<T> { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Would EnumString
be a better name?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
indeed
Replaced by #10241 |
Link to redmine ticket:
https://redmine.openinfosecfoundation.org/issues/6644 and all subtickets
https://redmine.openinfosecfoundation.org/issues/6645
https://redmine.openinfosecfoundation.org/issues/6646
https://redmine.openinfosecfoundation.org/issues/6647
https://redmine.openinfosecfoundation.org/issues/6648
https://redmine.openinfosecfoundation.org/issues/6628
Describe changes:
#10222 with typo fixed in doc