Project

General

Profile

Actions
Copy link

Bug #163

closed

suricata error with byte_jump and content+within after

Added by rmkml rmkml almost 14 years ago. Updated almost 14 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Gurvinder Singh
Target version:
0.9.2
Affected Versions:
Effort:
Difficulty:
Label:

Description

Hi,
Suricata v0.9.0 or git today have a error with this sig:
[22914] 20/5/2010 -- 17:08:17 - (detect-within.c:177) <Error> (DetectWithinSetup) -- [ERRCODE: SC_ERR_WITHIN_MISSING_CONTENT(101)] - within needs two preceeding content or uricontent options
[22914] 20/5/2010 -- 17:08:17 - (detect.c:319) <Error> (DetectLoadSigFile) -- [ERRCODE: SC_ERR_INVALID_SIGNATURE(37)] - Error parsing signature "alert tcp any 80 -> any any (msg:"suricata test"; flow:from_server,established; byte_jump:1,2; content:"|00|"; within:1; distance:2; classtype:attempted-admin; sid:98711212; rev:1;)" from file ...
Regards
Rmkml

Files

0001-added-the-support-for-setting-up-distance-sig-when-p.patch (3.83 KB) 0001-added-the-support-for-setting-up-distance-sig-when-p.patch Gurvinder Singh, 05/26/2010 01:06 PM
Actions
Copy link

Also available in: Atom PDF