Project

General

Profile

Actions
Copy link

Bug #5021

closed

dataset: error with space in rule language

Added by Shivani Bhardwaj about 2 years ago. Updated almost 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
5.0.10
Affected Versions:
Effort:
Difficulty:
Label:

Description

If there is a space following a keyword that does not expect a value,
the rule fails to load due to improper value evaluation.
e.g. Space after set command

alert http any any -> any any (http.user_agent; dataset:set  ,ua-seen,type string,save datasets.csv; sid:1;)

gives error
[ERRCODE: SC_ERR_UNKNOWN_VALUE(129)] - dataset action "" is not supported.

Related issues 1 (0 open — 1 closed)

Copied from Suricata - Bug #5019: dataset: error with space in rule languageClosedShivani BhardwajActions
Actions
Copy link
 #1

Updated by Shivani Bhardwaj about 2 years ago

  • Copied from Bug #5019: dataset: error with space in rule language added
Actions
Copy link
 #2

Updated by Victor Julien about 2 years ago

  • Target version changed from 5.0.9 to 5.0.10
Actions
Copy link
 #3

Updated by Jeff Lucovsky almost 2 years ago

  • Status changed from New to In Progress

Cherry-pick commit(s):
- 7366396011227b5e51ca810d86ebf7d310e98f34
- 6d2a2a073120906304f70c0e120565eae96e36b8

Actions
Copy link
 #4

Updated by Jeff Lucovsky almost 2 years ago

  • Status changed from In Progress to In Review
Actions
Copy link
 #5

Updated by Jeff Lucovsky almost 2 years ago

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: Atom PDF