Skip to content

Detect ike rs 8310 v2 #14851

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
catenacyber wants to merge 8 commits into from
+582 −1,676
Closed

Detect ike rs 8310 v2 #14851

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
18d82b0
detect/ike: move ike spi keywords to rust
catenacyber Feb 19, 2026
c06aa8e
detect/ike: move ike.exchtype keyword to rust
catenacyber Feb 19, 2026
94d2791
detect/ike: move ike.key_exchange_payload_length keyword to rust
catenacyber Feb 19, 2026
bb7fbaf
detect/ike: move ike.nonce_payload_length keyword to rust
catenacyber Feb 19, 2026
c54cdac
detect/ike: move ike.key_exchange_payload keyword to rust
catenacyber Feb 19, 2026
4c9e56b
detect/ike: move ike.nonce_payload keyword to rust
catenacyber Feb 19, 2026
ff91b22
detect/ike: move ike.vendor keyword to rust
catenacyber Feb 19, 2026
61fc390
detect/ike: move ike.ike.chosen_sa_attribute keyword to rust
catenacyber Feb 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions doc/userguide/rules/ike-keywords.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,6 +48,7 @@ Match on an attribute value of the chosen Security Association (SA) by the Respo
IKEv2 supports ``alg_enc``, ``alg_auth``, ``alg_prf`` and ``alg_dh``.

If there is more than one chosen SA the event ``MultipleServerProposal`` is set. The attributes of the first SA are used for this keyword.
You can also use other modes than equality, as in :ref:`integer keywords <rules-integer-keywords>`.


Examples::
Expand Down
Loading
Loading