Project

General

Profile

Bug #2982

invalid dsize distance rule being loaded by suricata

Added by Jason Taylor about 2 years ago. Updated 4 months ago.

Status:
In Review
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:
Needs backport

Description

The following rule, originally submitted under issue #317 is being loaded successfully but doesn't seem like it should be.

alert udp any any -> any any (msg:"TEST SUCCESFULL - dsize/distance INVALID combination "; dsize:10; content:"boom"; content:"loom"; distance:10; sid:6666663; rev:1;)


Related issues

Related to Bug #317: Invalid Rules ClosedJason TaylorActions
Copied to Bug #4316: invalid dsize distance rule being loaded by suricataAssignedJeff LucovskyActions
Copied to Bug #4317: invalid dsize distance rule being loaded by suricataAssignedShivani BhardwajActions
#1

Updated by Jason Taylor about 2 years ago

  • Related to Bug #317: Invalid Rules added
#2

Updated by Andreas Herz about 2 years ago

  • Assignee set to Jason Taylor
  • Target version set to TBD
#3

Updated by Victor Julien 7 months ago

  • Status changed from New to Assigned
  • Assignee changed from Jason Taylor to Jeff Lucovsky
  • Target version changed from TBD to 7.0rc1
  • Label Needs backport added
#4

Updated by Jeff Lucovsky 5 months ago

  • Copied to Bug #4316: invalid dsize distance rule being loaded by suricata added
#5

Updated by Jeff Lucovsky 5 months ago

  • Copied to Bug #4317: invalid dsize distance rule being loaded by suricata added
#6

Updated by Jeff Lucovsky 4 months ago

  • Status changed from Assigned to In Review

Also available in: Atom PDF