Feature #260
closedkeyword 'http_raw_uri'
Description
unknown rule keyword 'http_raw_uri'
Example:
[9838] 20/12/2010 -- 11:50:19 - (detect-parse.c:655) <Error> (SigParseOptions) -- [ERRCODE: SC_ERR_RULE_KEYWORD_UNKNOWN(100)] - unknown rule keyword 'http_raw_uri'.
[9838] 20/12/2010 -- 11:50:19 - (detect.c:526) <Error> (DetectLoadSigFile) -- [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - Error parsing signature "alert tcp $EXTERNAL_NET any -> $HOME_NET 8080 (msg:"WEB-MISC Tomcat UNIX platform directory traversal"; flow:established,to_server; content:"/..%5C/"; fast_pattern:only; content:"/..%5C/"; http_raw_uri; metadata:policy balanced-ips drop, policy security-ips drop, service http; reference:bugtraq,22960; reference:cve,2007-0450; reference:url,tomcat.apache.org/tomcat-6.0-doc/changelog.html; classtype:web-application-attack; sid:17500; rev:2;)" from file /etc/suricata/rules/web-misc.rules at line 602
Updated by Victor Julien over 13 years ago
- Status changed from New to Assigned
- Assignee set to Anoop Saldanha
- Target version set to 1.1beta2
Updated by Victor Julien over 13 years ago
- Status changed from Assigned to Closed
- % Done changed from 0 to 100
Patches are applied to the current git master.