suricata/scripts/docrules/docrules.yaml
Philippe Antoine 891b17277e ci: check dist rules
So that we catch if we add a typo like
app-layer-event:snmp.version_mismatchZZZ;
2026-05-05 20:56:25 +02:00

39 lines
778 B
YAML

%YAML 1.1
---
# This yaml configuration is used by scripts/check-doc-rules.py
# It is minimal to be able to load every rule in the documentation.
vars:
address-groups:
HOME_NET: "[192.168.0.0/16,10.0.0.0/8,172.16.0.0/12]"
EXTERNAL_NET: "!$HOME_NET"
MYSERVER: "192.168.12.34"
datasets:
ua-seen:
type: string
state: ua-seen.lst
dns-sha256-seen:
type: sha256
state: dns-sha256-seen.lst
app-layer:
protocols:
dnp3:
enabled: yes
detection-ports:
dp: 20000
pgsql:
enabled: yes
enip:
enabled: yes
modbus:
enabled: yes
reputation-categories-file: scripts/docrules/docrulesrep.lst
reputation-files:
classification-file: etc/classification.config
reference-config-file: etc/reference.config