Actions
Bug #220
closedAdd support for missing http related snort 2.8.5.x pcre modifiers.
Affected Versions:
Effort:
Difficulty:
Label:
Description
From the Snort manual... We are missing support for the following http related pcre modifiers for 2.8.5.3 support. Seems SF is using at least the 'H' modifier now pretty extensively in VRT rules. Should probably be a task.
H Match normalized HTTP request header (Similar to http header)
M Match normalized HTTP request method (Similar to http method)
C Match normalized HTTP request cookie (Similar to http cookie)
Files
Updated by Will Metcalf over 13 years ago
- Due date set to 08/17/2010
- Assignee changed from Victor Julien to Pablo Rincon
- Target version set to 1.0.2
- Estimated time set to 10.00 h
Updated by Victor Julien over 13 years ago
- File 0001-Adding-modifiers-C-H-and-M-to-pcre-http-cookie-heade.patch 0001-Adding-modifiers-C-H-and-M-to-pcre-http-cookie-heade.patch added
- Status changed from New to Closed
- % Done changed from 0 to 100
Patch applied, thanks Pablo.
Actions