Project

General

Profile

Actions
Copy link

Bug #4259

closed
JI JI

Multiple modifications to a rule do not work

Bug #4259: Multiple modifications to a rule do not work

Added by Jason Ish about 5 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
1.2.4
Affected Versions:
1.2.0
Effort:
Difficulty:
Label:

Description

Given 2 or more entries in the modify.conf file that would apply to the same rule, only the last one affects the output. For example, given a modify.conf of

re:"GPL\ WORM" "alert(.*)" "drop\1" 
re:"GPL\ WORM" 1434 5555

only the last line will take affect, and the rule will be left in the "alert" state.

JI Updated by Jason Ish over 4 years ago Actions
Copy link
 #1

  • Assignee changed from Shivani Bhardwaj to Jason Ish

JI Updated by Jason Ish over 4 years ago Actions
Copy link
 #2

This also affects the case where a rule may be modified and dropped. Only the modification takes affect.

JI Updated by Jason Ish over 4 years ago Actions
Copy link
 #3

  • Status changed from New to In Progress
  • Target version set to 1.3.0

JI Updated by Jason Ish about 4 years ago Actions
Copy link
 #5

  • Status changed from In Progress to Closed

Merged.

JI Updated by Jason Ish about 4 years ago Actions
Copy link
 #6

  • Target version changed from 1.3.0 to 1.2.4
Actions
Copy link

Also available in: PDF Atom