Bug #4317
open
invalid dsize distance rule being loaded by suricata (6.0.x backport)
Added by Jeff Lucovsky over 2 years ago.
Updated 28 days ago.
Description
The following rule, originally submitted under issue #317 is being loaded successfully but doesn't seem like it should be.
alert udp any any -> any any (msg:"TEST SUCCESFULL - dsize/distance INVALID combination "; dsize:10; content:"boom"; content:"loom"; distance:10; sid:6666663; rev:1;)
- Copied from Bug #2982: invalid dsize distance rule being loaded by suricata added
- Label deleted (
Needs backport)
- Target version changed from 6.0.2 to 6.0.3
- Target version changed from 6.0.3 to 6.0.4
- Target version changed from 6.0.4 to 6.0.5
- Target version changed from 6.0.5 to 6.0.6
- Target version changed from 6.0.6 to 6.0.7
- Target version changed from 6.0.7 to 6.0.8
- Target version changed from 6.0.8 to 6.0.9
- Subject changed from invalid dsize distance rule being loaded by suricata to invalid dsize distance rule being loaded by suricata (6.0.x backport)
- Target version changed from 6.0.9 to 6.0.10
- Assignee changed from Shivani Bhardwaj to Jeff Lucovsky
- Status changed from Assigned to In Review
- Target version changed from 6.0.10 to 6.0.11
- Parent task deleted (
#2982)
- Target version changed from 6.0.11 to 6.0.12
- Status changed from In Review to Assigned
- Target version changed from 6.0.12 to 6.0.13
Moving back to "assigned" as it seems we've stalled on this.
Also available in: Atom
PDF