Project

General

Profile

Actions
Copy link

Feature #259

closed
PM AS

regex modifier 'I'

Feature #259: regex modifier 'I'

Added by Peter Manev over 15 years ago. Updated about 15 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Anoop Saldanha
Target version:
1.1beta2
Effort:
Difficulty:
Label:

Description

[ERRCODE: SC_ERR_UNKNOWN_REGEX_MOD(129)] - unknown regex modifier 'I'

Example:

[9838] 20/12/2010 -- 11:50:19 - (detect-pcre.c:862) <Error> (DetectPcreParse) -- [ERRCODE: SC_ERR_UNKNOWN_REGEX_MOD(129)] - unknown regex modifier 'I'

[9838] 20/12/2010 -- 11:50:19 - (detect.c:526) <Error> (DetectLoadSigFile) -- [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - Error parsing signature "alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-IIS source code disclosure attempt"; flow:to_server,established; content:"Translate|3A| "; nocase; byte_test:1,=,102,0,relative; pcre:"/%.*%/smiI"; metadata:service http; reference:bugtraq,14764; classtype:attempted-recon; sid:17648; rev:1;)" from file /etc/suricata/rules/web-iis.rules at line 177

VJ Updated by Victor Julien over 15 years ago Actions
Copy link
 #1

What buffer does this inspect?

AS Updated by Anoop Saldanha over 15 years ago Actions
Copy link
 #2

Victor Julien wrote:

What buffer does this inspect?

raw uri

VJ Updated by Victor Julien over 15 years ago Actions
Copy link
 #3

  • Assignee set to Victor Julien
  • Target version set to 1.1beta2

Thanks Anoop.

This will be part of a task for a OISF dev.

VJ Updated by Victor Julien about 15 years ago Actions
Copy link
 #4

  • Status changed from New to Assigned
  • Assignee changed from Victor Julien to Anoop Saldanha

VJ Updated by Victor Julien about 15 years ago Actions
Copy link
 #5

  • Status changed from Assigned to Closed
  • % Done changed from 0 to 100

Patches are applied to the current git master.

Actions
Copy link

Also available in: PDF Atom