GetNodeValue returns the NodeValue based on the key value.

NewDstNet returns a new NodeNet node with `dst` as key.

NewDstPort returns a new NodePort node with `dport` as key.

NewID returns a new NodeID node.

NewProto returns a new proto node.

NewRoot returns a new NodeRoot node.

NewSrcNet returns a new NodeNet node with `src` as key.

NewSrcPort returns a new NodePort node with `sport` as key.

DstNet defines the destination IP node keyword.

DstPort defines the destination port node keyword.

ID defines the id node keyword.

Proto defines the protocol node keyword.

Root defines the root node keyword.

SrcNet defines the source IP node keyword.

SrcPort defines the source port node keyword.

Keywords defines what Yara metadata entries are used for processing the rule.

NodeTypeLookUp utility to lookup node types based on its keywords.

RangeSplitter character used to define a range, like ports 80:443.

RuleDefVersion defines the version of the metadata accepted by Mole this will be handy to version rules later on.

SequenceSplitter character used to define a sequence, like ports 80,443.

NodeID represents proto node.

NodeNet represents proto node.

NodePort represents port node.

NodeProto represents proto node.

NodeRoot represents the root node.

NodeValue is the interface that all nodes in the decision tree needs to meet.

NodeType defines the node type.