Project

General

Profile

Actions
Copy link

Feature #259

closed

regex modifier 'I'

Added by Peter Manev almost 14 years ago. Updated over 13 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Anoop Saldanha
Target version:
1.1beta2
Effort:
Difficulty:
Label:

Description

[ERRCODE: SC_ERR_UNKNOWN_REGEX_MOD(129)] - unknown regex modifier 'I'

Example:

[9838] 20/12/2010 -- 11:50:19 - (detect-pcre.c:862) <Error> (DetectPcreParse) -- [ERRCODE: SC_ERR_UNKNOWN_REGEX_MOD(129)] - unknown regex modifier 'I'

[9838] 20/12/2010 -- 11:50:19 - (detect.c:526) <Error> (DetectLoadSigFile) -- [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - Error parsing signature "alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-IIS source code disclosure attempt"; flow:to_server,established; content:"Translate|3A| "; nocase; byte_test:1,=,102,0,relative; pcre:"/%.*%/smiI"; metadata:service http; reference:bugtraq,14764; classtype:attempted-recon; sid:17648; rev:1;)" from file /etc/suricata/rules/web-iis.rules at line 177

Actions
Copy link

Also available in: Atom PDF