Project

General

Profile

Actions
Copy link

Bug #4317

closed

invalid dsize distance rule being loaded by suricata (6.0.x backport)

Added by Jeff Lucovsky almost 4 years ago. Updated 10 months ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:

Description

The following rule, originally submitted under issue #317 is being loaded successfully but doesn't seem like it should be.

alert udp any any -> any any (msg:"TEST SUCCESFULL - dsize/distance INVALID combination "; dsize:10; content:"boom"; content:"loom"; distance:10; sid:6666663; rev:1;)

Related issues 1 (0 open — 1 closed)

Follows Suricata - Bug #2982: invalid dsize distance rule being loaded by suricataClosedJeff LucovskyActions
Actions
Copy link

Also available in: Atom PDF