Project

General

Profile

Actions

Bug #5578

closed
VJ JL

rules: stateful drop on dsize sig with app proto set

Bug #5578: rules: stateful drop on dsize sig with app proto set

Added by Victor Julien over 3 years ago. Updated almost 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

drop http any any -> any any (dsize:0; sid:1;)

This should not lead to a flow drop, as it contains a match on packet properties (dsize).

VJ Updated by Victor Julien over 3 years ago Actions #1

  • Target version changed from 7.0.0-rc1 to 7.0.0-rc2

VJ Updated by Victor Julien almost 3 years ago Actions #2

  • Target version changed from 7.0.0-rc2 to 7.0.0

VJ Updated by Victor Julien almost 3 years ago Actions #3

  • Priority changed from Normal to High

VJ Updated by Victor Julien almost 3 years ago Actions #4

  • Status changed from Assigned to New
  • Assignee changed from Victor Julien to OISF Dev
  • Priority changed from High to Normal
  • Target version changed from 7.0.0 to 6.0.14

This is not an issue in 7.

Tests added in https://github.com/OISF/suricata-verify/pull/1285

VJ Updated by Victor Julien over 2 years ago Actions #5

  • Target version changed from 6.0.14 to 6.0.15

SB Updated by Shivani Bhardwaj over 2 years ago Actions #6

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Jeff Lucovsky

VJ Updated by Victor Julien over 2 years ago Actions #7

  • Target version changed from 6.0.15 to 6.0.16

PA Updated by Philippe Antoine over 2 years ago Actions #8

  • Status changed from Assigned to In Review

VJ Updated by Victor Julien over 2 years ago Actions #9

  • Target version changed from 6.0.16 to 6.0.17

JL Updated by Jeff Lucovsky about 2 years ago Actions #10

@Victor Julien Is this still needed for 6.0.x?

VJ Updated by Victor Julien about 2 years ago Actions #11

  • Target version changed from 6.0.17 to 6.0.18

VJ Updated by Victor Julien about 2 years ago Actions #12

  • Target version changed from 6.0.18 to 6.0.19

VJ Updated by Victor Julien about 2 years ago Actions #13

  • Target version changed from 6.0.19 to 6.0.20

PA Updated by Philippe Antoine almost 2 years ago Actions #14

  • Status changed from In Review to Closed
Actions

Also available in: PDF Atom