Project

General

Profile

Actions

Feature #1448

closed

xbits

Added by Victor Julien over 9 years ago. Updated over 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

xbits are 'flowbits', but then per host (hostbits) or per ip_pair

Following the syntax as suggested by Michael Rash:
http://www.cipherdyne.org/blog/2013/07/crossing-the-streams-in-ids-signature-languages.html

Also see:
http://blog.inliniac.net/2014/12/21/crossing-the-streams-in-suricata/

Actions

Also available in: Atom PDF