Project

General

Profile

Actions
Copy link

Feature #491

closed

improve rule analyzer for tcp depth/offset signatures

Added by Victor Julien almost 12 years ago. Updated almost 12 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Anoop Saldanha
Target version:
1.3
Effort:
Difficulty:
Label:

Description

Give warning when a "alert tcp" signature uses depth/offset.

Suggest "alert tcp-pkt" to the user for those cases where a pkt match is really meant.

Files

Download all files
0001-Update-SigValidate-to-allow-http-keywords-to-be-spec.patch (2.85 KB) 0001-Update-SigValidate-to-allow-http-keywords-to-be-spec.patch Anoop Saldanha, 07/05/2012 01:17 AM
0002-rule-analyzer-updated-for-sigs-with-offset-depth-set.patch (4.08 KB) 0002-rule-analyzer-updated-for-sigs-with-offset-depth-set.patch Anoop Saldanha, 07/05/2012 01:17 AM
Actions
Copy link

Also available in: Atom PDF