Project

General

Profile

Actions

Bug #2982

closed

invalid dsize distance rule being loaded by suricata

Added by Jason Taylor almost 5 years ago. Updated 5 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:
Needs backport

Description

The following rule, originally submitted under issue #317 is being loaded successfully but doesn't seem like it should be.

alert udp any any -> any any (msg:"TEST SUCCESFULL - dsize/distance INVALID combination "; dsize:10; content:"boom"; content:"loom"; distance:10; sid:6666663; rev:1;)


Related issues 4 (0 open4 closed)

Related to Suricata - Bug #317: Invalid Rules ClosedJason TaylorActions
Related to Suricata - Bug #5905: invalid bsize and distance rule being loaded by suricataClosedJeff LucovskyActions
Precedes Suricata - Bug #4317: invalid dsize distance rule being loaded by suricata (6.0.x backport)RejectedActions
Copied to Suricata - Bug #4316: invalid dsize distance rule being loaded by suricataRejectedJeff LucovskyActions
Actions

Also available in: Atom PDF