[Oisf-devel] Arithmetic Operators in signature

[rmkml]

Hi Amit,

Not easy, depending your need,

could you describe one example please ?

For exemple use byte_test ? or use pcre relative ?

Another is lua script for complex.

Best Regards
@Rmkml


On Thu, 1 Sep 2016, amit zala wrote:

> Hi,
> Is there any way to use arithmetic operators (+ - * /) in signature? 
> For example,
> I use byte_extract to extract some bytes, and then I want to multiply it by some static value and check if it crosses some limit? Is there any way to do it in signature itself?
> I searched into suricata guide but I was not able to find anything which satisfies this requirement.
> 
> Thanks
> Amit
> 
>