Project

General

Profile

Actions

Bug #4259

closed

Multiple modifications to a rule do not work

Added by Jason Ish about 3 years ago. Updated about 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Given 2 or more entries in the modify.conf file that would apply to the same rule, only the last one affects the output. For example, given a modify.conf of

re:"GPL\ WORM" "alert(.*)" "drop\1" 
re:"GPL\ WORM" 1434 5555

only the last line will take affect, and the rule will be left in the "alert" state.

Actions #1

Updated by Jason Ish over 2 years ago

  • Assignee changed from Shivani Bhardwaj to Jason Ish
Actions #2

Updated by Jason Ish about 2 years ago

This also affects the case where a rule may be modified and dropped. Only the modification takes affect.

Actions #3

Updated by Jason Ish about 2 years ago

  • Status changed from New to In Progress
  • Target version set to 1.3.0
Actions #5

Updated by Jason Ish about 2 years ago

  • Status changed from In Progress to Closed

Merged.

Actions #6

Updated by Jason Ish about 2 years ago

  • Target version changed from 1.3.0 to 1.2.4
Actions

Also available in: Atom PDF