Project

General

Profile

Actions

Bug #5020

closed

dataset: error with space in rule language

Added by Shivani Bhardwaj about 2 years ago. Updated almost 2 years ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

If there is a space following a keyword that does not expect a value,
the rule fails to load due to improper value evaluation.
e.g. Space after set command

alert http any any -> any any (http.user_agent; dataset:set  ,ua-seen,type string,save datasets.csv; sid:1;)

gives error
[ERRCODE: SC_ERR_UNKNOWN_VALUE(129)] - dataset action "" is not supported.


Related issues 1 (0 open1 closed)

Copied from Suricata - Bug #5019: dataset: error with space in rule languageClosedShivani BhardwajActions
Actions

Also available in: Atom PDF