https://redmine.openinfosecfoundation.org/https://redmine.openinfosecfoundation.org/favicon.ico?17011170022017-04-06T02:24:20ZOpen Information Security FoundationSuricata - Bug #2056: missing warning on a rule using within with one content keywordhttps://redmine.openinfosecfoundation.org/issues/2056?journal_id=80692017-04-06T02:24:20ZVictor Julienvictor@inliniac.net
<ul></ul><p>At least in some cases this is intentional, like with file_data. It's interpreted as 'depth'. IIRC this was to ensure compatibility with rules for Snort.</p> Suricata - Bug #2056: missing warning on a rule using within with one content keywordhttps://redmine.openinfosecfoundation.org/issues/2056?journal_id=81862017-05-03T16:14:36ZAndreas Herzoisf@herzandreas.de
<ul><li><strong>Assignee</strong> set to <i>OISF Dev</i></li><li><strong>Target version</strong> set to <i>TBD</i></li></ul> Suricata - Bug #2056: missing warning on a rule using within with one content keywordhttps://redmine.openinfosecfoundation.org/issues/2056?journal_id=129002019-07-09T21:55:33ZAndreas Herzoisf@herzandreas.de
<ul></ul><p>would be a warning still a valid solution?</p> Suricata - Bug #2056: missing warning on a rule using within with one content keywordhttps://redmine.openinfosecfoundation.org/issues/2056?journal_id=129132019-07-10T07:55:37ZVictor Julienvictor@inliniac.net
<ul></ul><p>I'm inclined to leave as-is.</p> Suricata - Bug #2056: missing warning on a rule using within with one content keywordhttps://redmine.openinfosecfoundation.org/issues/2056?journal_id=131882019-07-29T21:59:14ZAndreas Herzoisf@herzandreas.de
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Closed</i></li></ul>