[Oisf-devel] Request new keyword http_uri_end for uri ending please ?

[Anoop Saldanha]

On Wed, Jul 16, 2014 at 7:32 PM, rmkml <rmkml at yahoo.fr> wrote:
> Hi,
>
> Thx you Community and OISF dev team for good works!
>
> Maybe it's interesting adding new keyword like "http_uri_end" for checking
> uri content ending without pcre ?
>
> like this:
> ... content:"/0/"; http_uri_end;
>
> Similar exemple with classic "snort" like:
> ... content:"/0/"; http_uri; pcre:"/\/0\/$/U";
>
> Because http_uri_end it's more performance than pcre ?
> (but small used)
>

You mean this keyword - https://redmine.openinfosecfoundation.org/issues/741 ?

-- 
-------------------------------
Anoop Saldanha
http://www.poona.me
-------------------------------