Project

General

Profile

Actions

Feature #506

closed

Update rules analyser after #494 changes

Added by Eric Leblond about 12 years ago. Updated almost 12 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

It is now possible to write rules such as:

alert ip6 any any -> any 22 (msg: "TEST IP6"; sid:2;)
alert tcp any any -> any any (msg: "TEST TCP 6"; l3_proto:ipv6; sid:12;)
alert http any any -> any 22 (msg: "TEST HTTP 6"; l3_proto:ip6; sid:14;)

The analyser may need to be update to reflect this.


Related issues 1 (0 open1 closed)

Related to Suricata - Feature #494: ipv4 or ipv6 only rulesClosedEric Leblond07/05/2012Actions
Actions

Also available in: Atom PDF