Project

General

Profile

Actions

Feature #2755

open

vendor id / vid keyword to give rulesets unique sid ranges

Added by Victor Julien almost 6 years ago. Updated about 4 years ago.

Status:
New
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Since more and more rulesets are added to the rule index, risk of sid space collisions increase. It's been suggested that 'gid' should be used to separate them, but the gid field already has other uses in the real world.

So the idea is to add a 'vid' keyword to keep rulesets apart. The rule index should probably also be the master of the vid id's.


Related issues 3 (3 open0 closed)

Related to Suricata - Task #2685: SuriCon 2018 brainstormAssignedVictor JulienActions
Related to Suricata - Task #4097: Suricon 2020 brainstormAssignedVictor JulienActions
Related to Suricata - Documentation #3303: Add a documentation about the used sid and gid rangesNewOISF DevActions
Actions

Also available in: Atom PDF