Azinix

Rlp_NocaseAttribute_t Struct Reference

The nocase option is used to deactivate case sensitivity in a content rule. More...

#include <rlp.h>


Data Fields

bool nocase


Detailed Description

The nocase option is used to deactivate case sensitivity in a content rule.

The nocase option is used to deactivate case sensitivity in a content rule.

It is specified alone within a rule and any ASCII characters that are compared to the packet payload are treated as though they are either upper of lower case.

alert tcp any any -> 192.168.1.0/24 21 (content:"USER root"; nocase; msg: "FTP root user access attempt";)

Using a struct is unnecc, since the parse tree will contain the nocase node; will remove this at some point.

Definition at line 823 of file rlp.h.


Field Documentation

bool Rlp_NocaseAttribute_t::nocase

Definition at line 825 of file rlp.h.