Project

General

Profile

Actions
Copy link

Documentation #7222

open

Documentation #3180: tracking: document all decoder and app-layer events

userguide: document decoder events

Added by Juliana Fajardini Reichow 4 months ago. Updated 4 months ago.

Status:
New
Priority:
Normal
Assignee:
Community Ticket
Target version:
TBD
Affected Versions:
Effort:
Difficulty:
Label:
Beginner, Outreachy

Description

We have several rules shipped with Suricata (under the rules directory), but those aren't documented.

This task consists of documenting the decoder events seen in the rules present in the decoder-events.rules file.

This document should be named decoder-events.rst and should be a section of a sub-chapter of the Suricata Rules chapter in our Userguide. Please ask us (or suggest) what the name of that sub-chapter should be. One suggestion is Event rules provided with Suricata

In that case, the structure would be:
Userguide
  1. Suricata Rules (chapter)
    1. Rules Shipped with Suricata (sub-chapter)
      1. Decoder events (chapter section)

Related issues 1 (1 open — 0 closed)

Related to Suricata - Documentation #7223: document 'stream-event' keywordNewOISF DevActions
Actions
Copy link

Also available in: Atom PDF