Project

General

Profile

Actions
Copy link

Bug #5031

open

flowbits - no error on invalid options

Added by Brandon Murphy almost 3 years ago. Updated 8 months ago.

Status:
Assigned
Priority:
Normal
Assignee:
Shivani Bhardwaj
Target version:
8.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

as per https://redmine.openinfosecfoundation.org/issues/4786#note-8 - creating a new issue

sid 7, despite not having a valid option provided, does not produce an error/warning from suricata.

alert http any any -> any any (msg:"flowbits with noalert option"; flow:established,to_server; http.method; content:"POST"; flowbits:set,ET.whatever,asdfasdf; sid:7;)

Related issues 3 (1 open — 2 closed)

Related to Suricata - Optimization #5207: Common Rust parser for *bitsAssignedShivani BhardwajActions
Copied to Suricata - Bug #5154: flowbits - no error on invalid optionsClosedShivani BhardwajActions
Copied to Suricata - Bug #5155: flowbits - no error on invalid optionsRejectedJeff LucovskyActions
Actions
Copy link

Also available in: Atom PDF