Project

General

Profile

Actions
Copy link

Bug #2856

closed
MS

Add Rule with Comment at the end

Bug #2856: Add Rule with Comment at the end

Added by Manuel Sousa about 7 years ago. Updated about 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:

Description

I was trying to add a rule with a comment at the end like this:

pass udp 192.168.1.1 any -> any 161 # domain.dns.com

Suricata parser can't read this rule and throws a 

[ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - error parsing signature
to this rule which I think as everything to be accepeted inside a rules file.

Thank you

MS Updated by Manuel Sousa about 7 years ago Actions
Copy link
 #1

aparently this is the intended behaviour. You may close this issue. Sorry for this.

VJ Updated by Victor Julien about 7 years ago Actions
Copy link
 #2

The signature is invalid by itself as well, as it's missing the options part. A sid option is mandatory.

AH Updated by Andreas Herz about 7 years ago Actions
Copy link
 #3

  • Status changed from New to Closed

closed as requested by the author

KT Updated by Koen Teuwen about 1 year ago Actions
Copy link
 #4

I made a feature request related to this bug report here (to change the design): https://redmine.openinfosecfoundation.org/issues/7559?next_issue_id=7550

Actions
Copy link

Also available in: PDF Atom