Project

General

Profile

Actions
Copy link

Bug #2064

closed

Rules with dual classtype do not error

Added by Francis Trudeau about 7 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Andreas Herz
Target version:
4.0.1
Affected Versions:
Effort:
Difficulty:
Label:

Description

The following rules do not error in Suricata 3.2.1 or Suricata version 4.0dev (rev 6585ac4):

alert ip any any -> any any (msg:"Dual classtype test"; content:"31d7c3e829be03400641f80b821ef728"; classtype:policy-violation; classtype:trojan-activity; sid:3031; rev:1;)

alert ip any any -> any any (msg:"Dual classtype test"; content:"31d7c3e829be03400641f80b821ef728"; classtype:policy-violation; classtype:policy-violation; sid:3032; rev:1;)

Actions
Copy link
 #1

Updated by Victor Julien about 7 years ago

  • Status changed from New to Assigned
  • Assignee set to Andreas Herz
  • Target version set to 70
Actions
Copy link
 #2

Updated by Andreas Herz over 6 years ago

  • Status changed from Assigned to Closed
Actions
Copy link
 #3

Updated by Andreas Herz over 6 years ago

  • Target version changed from 70 to 4.0.1
Actions
Copy link

Also available in: Atom PDF