Project

General

Profile

Bug #5

Multi-line rules do not work in the OISF engine.

Added by Will Metcalf over 10 years ago. Updated over 10 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

move of bug from bugzilla*

Since snort 1.8 you can have rules that span multiple lines by
adding a backslash to the end of a line “\”. Currently this is not supported
by the OISF engine. snort-2.8.5 manual pg. 113

http://www.snort.org/assets/120/snort_manual.pdf

#1

Updated by Victor Julien over 10 years ago

  • Estimated time changed from 0.50 h to 2.50 h
#2

Updated by Victor Julien over 10 years ago

  • Status changed from New to Closed
  • Assignee changed from OISF Dev to Jason Ish

Patch applied, thanks Jason!

Also available in: Atom PDF