#include <rlp.h>
Data Fields | |
| bool | nocase |
The nocase option is used to deactivate case sensitivity in a content rule.
It is specified alone within a rule and any ASCII characters that are compared to the packet payload are treated as though they are either upper of lower case.
alert tcp any any -> 192.168.1.0/24 21 (content:"USER root"; nocase; msg: "FTP root user access attempt";)
Using a struct is unnecc, since the parse tree will contain the nocase node; will remove this at some point.
Definition at line 823 of file rlp.h.