There you go.

Disclaimer: it's the first vim syntax file I ever wrote so it's probably
not very good :P Also it's not up-to-date with the latest version of SEC
so some action keywords are missing, but it's easy to add them.


On 09/02/17 23:16, James Lay wrote:
> Anyone make/happen to have a .vim syntax file for SEC?  Thanks.
>
> James
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> Simple-evcorr-users mailing list
> Simple-evcorr-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

-- 
Signature S21sec
Logo    

Alberto Cortón
/DevOps/
/Technology/
M:+34 607 277 041

T:+34 902 222 521
www.s21sec.com <http://www.s21sec.com> | blog.s21sec.com
<https://www.s21sec.com/blog/>

<skype:id_skype?add>  <https://www.facebook.com/S21sec/> 
<https://twitter.com/S21sec> 
<https://www.linkedin.com/company/s21sec?trk=biz-companies-cym> 
/The information in this email and file attachments is confidential and
should be read only by the person or entity to whom it is addressed. If
you have received this communication by mistake, please notify the
sender and immediately delete the message and the attached files without
reading, coping, recording, distributing, disseminating or making any
other use of the information

El contenido de este email y los ficheros anexos son confidenciales y
deberán ser leídos exclusivamente por la persona o entidad a la cual
está dirigida. Si Vd. ha recibido este comunicado por error, por favor,
informe de inmediato al remitente y borre el mensaje así como los
ficheros anexos sin leer, copiar, almacenar, distribuir, compartir o
realizar cualquier otro uso de la información. /

*Please consider the environment before printing this email*

if exists("b:current_syntax")
    finish
endif

let b:current_syntax = "sec"

syntax case ignore

syntax match ruleComment "^#.*$"

syntax match secVar '%\a\+'
syntax match ruleContextValue 'context\s*=\s*.\+'

syntax keyword secRule type time ptype desc continue pattern action context 
cfset
syntax keyword secRule constset rem ptype2 pattern2 desc2 context2 action2
syntax keyword secRule window thresh joincfset procallin

syntax keyword ruleType single singlewithscript singlewithsuppress pair 
syntax keyword ruleType pairwithwindow singlewiththreshold 
singlewith2thresholds 
syntax keyword ruleType eventgroup suppress calendar jump options 

syntax keyword rulePtype cached regexp
syntax keyword ruleContinue dontcont takenext
syntax keyword ruleContext SEC_STARTUP SEC_RESTART SEC_SOFTRESTART 
SEC_INTERNAL_EVENT SEC_LOGROTATE SEC_SHUTDOWN

syntax keyword ruleAction assign eval lcall logonly none write owritecl udgram 
syntax keyword ruleAction ustream udpsock tcpsock shellcmd spawn pipe create 
syntax keyword ruleAction delete obsolete set alias unalias add prepend fill
syntax keyword ruleAction report copy empty pop shift exists getsize getaliases
syntax keyword ruleAction getltime getctime setctime event tevent reset getwpos
syntax keyword ruleAction setwpos free call rewrite if else while break



highlight link secRule     Type
highlight link ruleComment Comment
highlight link ruleParam   Statement

highlight link ruleType     Constant
highlight link rulePtype    Constant
highlight link ruleContinue Constant
highlight link ruleContext  Identifier
highlight link ruleCfset    Identifier
highlight link ruleAction   PreProc
highlight link secVar       Special


highlight link ruleContextValue String
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to