Project

General

Profile

Actions
Copy link

Feature #260

closed

keyword 'http_raw_uri'

Added by Peter Manev almost 14 years ago. Updated over 13 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Anoop Saldanha
Target version:
1.1beta2
Effort:
Difficulty:
Label:

Description

unknown rule keyword 'http_raw_uri'

Example:

[9838] 20/12/2010 -- 11:50:19 - (detect-parse.c:655) <Error> (SigParseOptions) -- [ERRCODE: SC_ERR_RULE_KEYWORD_UNKNOWN(100)] - unknown rule keyword 'http_raw_uri'.

[9838] 20/12/2010 -- 11:50:19 - (detect.c:526) <Error> (DetectLoadSigFile) -- [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - Error parsing signature "alert tcp $EXTERNAL_NET any -> $HOME_NET 8080 (msg:"WEB-MISC Tomcat UNIX platform directory traversal"; flow:established,to_server; content:"/..%5C/"; fast_pattern:only; content:"/..%5C/"; http_raw_uri; metadata:policy balanced-ips drop, policy security-ips drop, service http; reference:bugtraq,22960; reference:cve,2007-0450; reference:url,tomcat.apache.org/tomcat-6.0-doc/changelog.html; classtype:web-application-attack; sid:17500; rev:2;)" from file /etc/suricata/rules/web-misc.rules at line 602

Actions
Copy link

Also available in: Atom PDF