Project

General

Profile

Actions
Copy link

Bug #5019

closed

dataset: error with space in rule language

Added by Shivani Bhardwaj almost 3 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Shivani Bhardwaj
Target version:
7.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:
Needs backport to 5.0, Needs backport to 6.0

Description

If there is a space following a keyword that does not expect a value,
the rule fails to load due to improper value evaluation.
e.g. Space after set command

alert http any any -> any any (http.user_agent; dataset:set  ,ua-seen,type string,save datasets.csv; sid:1;)

gives error
[ERRCODE: SC_ERR_UNKNOWN_VALUE(129)] - dataset action "" is not supported.

Related issues 2 (0 open — 2 closed)

Copied to Suricata - Bug #5020: dataset: error with space in rule languageClosedShivani BhardwajActions
Copied to Suricata - Bug #5021: dataset: error with space in rule languageClosedJeff LucovskyActions
Actions
Copy link
 #1

Updated by Shivani Bhardwaj almost 3 years ago

  • Copied to Bug #5020: dataset: error with space in rule language added
Actions
Copy link
 #2

Updated by Shivani Bhardwaj almost 3 years ago

  • Copied to Bug #5021: dataset: error with space in rule language added
Actions
Copy link
 #3

Updated by Shivani Bhardwaj over 2 years ago

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: Atom PDF