FindData Condition

The FindData condition checks to see if certain data contains a specific value. It uses the attributes ApplyTo, Offset, Length, UseDataAvail and IfNull to determine what data is to be subject to the test and what the return value should be if the data is not available.

Also see section “Specifying Data for Conditions”.

Data Attribute

Type Binary Data
Default (empty)
Description The Data attribute specifies what data is to be found in the data referenced by ApplyTo, Offset and Length.

CaseSensitive Attribute

Type Boolean Values
Default false
Description Specifies whether to search for the data in case-sensitive or case-insensitive format.

IgnoreWhiteSpaces Attribute

Type Boolean Values
Default false
Description Specifies whether or not to ignore white spaces while searching.

GenVerify Attribute

This attribute is only applicable if the condition is used within a TcpRuleRecvProto rule. See section "GenVerify Attribute Of Conditions" for details.

Example

<FindData>
  <ApplyTo>Http.Request.Url</ApplyTo>
  <Data>/images/</Data>
  <CaseSensitive>true</CaseSensitive>
</FindData>
Parent topic: Conditions