Project

General

Profile

Actions

Bug #5

closed

Multi-line rules do not work in the OISF engine.

Added by Will Metcalf about 15 years ago. Updated almost 15 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

move of bug from bugzilla*

Since snort 1.8 you can have rules that span multiple lines by
adding a backslash to the end of a line “\”. Currently this is not supported
by the OISF engine. snort-2.8.5 manual pg. 113

http://www.snort.org/assets/120/snort_manual.pdf

Actions #1

Updated by Victor Julien almost 15 years ago

  • Estimated time changed from 0.50 h to 2.50 h
Actions #2

Updated by Victor Julien almost 15 years ago

  • Status changed from New to Closed
  • Assignee changed from OISF Dev to Jason Ish

Patch applied, thanks Jason!

Actions

Also available in: Atom PDF