Project

General

Profile

Actions

Bug #4259

closed

Multiple modifications to a rule do not work

Added by Jason Ish over 1 year ago. Updated 9 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Given 2 or more entries in the modify.conf file that would apply to the same rule, only the last one affects the output. For example, given a modify.conf of

re:"GPL\ WORM" "alert(.*)" "drop\1" 
re:"GPL\ WORM" 1434 5555

only the last line will take affect, and the rule will be left in the "alert" state.

Actions

Also available in: Atom PDF