Actions
Bug #1486
closedinvalid rule: parser err msg not descriptive enough
Affected Versions:
Effort:
Difficulty:
Label:
Description
12/6/2015 -- 13:29:04 - <Error> - [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - filemagic keyword arguments should be always enclosed in double quotes. Invalid content keyword passed in this rule - ""picture" sid:5555555" 12/6/2015 -- 13:29:04 - <Error> - [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - error parsing signature "alert http any any -> any any (msg:"File extract all these files"; content:"cnn.com"; http_host; filemagic:"picture" sid:5555555; rev:1;)" from file http-host.rules at line 1 12/6/2015 -- 13:29:04 - <Warning> - [ERRCODE: SC_ERR_NO_RULES(42)] - No rules loaded from http-host.rules
The err msg should be regarding the missing semicolon not double quotes.
Updated by Victor Julien almost 10 years ago
- Status changed from New to Assigned
- Assignee set to Jason Ish
- Target version set to 3.0RC1
Updated by Victor Julien almost 9 years ago
- Subject changed from err msg not descriptive enough to invalid rule: parser err msg not descriptive enough
Updated by Jason Ish over 8 years ago
- Status changed from Assigned to Closed
- Target version changed from 70 to 3.2beta1
Actions