Project

General

Profile

Actions
Copy link

Bug #5578

closed

rules: stateful drop on dsize sig with app proto set

Added by Victor Julien about 2 years ago. Updated 6 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
6.0.20
Affected Versions:
Effort:
Difficulty:
Label:

Description

drop http any any -> any any (dsize:0; sid:1;)

This should not lead to a flow drop, as it contains a match on packet properties (dsize).
Actions
Copy link
 #1

Updated by Victor Julien almost 2 years ago

  • Target version changed from 7.0.0-rc1 to 7.0.0-rc2
Actions
Copy link
 #2

Updated by Victor Julien over 1 year ago

  • Target version changed from 7.0.0-rc2 to 7.0.0
Actions
Copy link
 #3

Updated by Victor Julien over 1 year ago

  • Priority changed from Normal to High
Actions
Copy link
 #4

Updated by Victor Julien over 1 year ago

  • Status changed from Assigned to New
  • Assignee changed from Victor Julien to OISF Dev
  • Priority changed from High to Normal
  • Target version changed from 7.0.0 to 6.0.14

This is not an issue in 7.

Tests added in https://github.com/OISF/suricata-verify/pull/1285

Actions
Copy link
 #5

Updated by Victor Julien about 1 year ago

  • Target version changed from 6.0.14 to 6.0.15
Actions
Copy link
 #6

Updated by Shivani Bhardwaj about 1 year ago

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Jeff Lucovsky
Actions
Copy link
 #7

Updated by Victor Julien about 1 year ago

  • Target version changed from 6.0.15 to 6.0.16
Actions
Copy link
 #8

Updated by Philippe Antoine 10 months ago

  • Status changed from Assigned to In Review
Actions
Copy link
 #9

Updated by Victor Julien 10 months ago

  • Target version changed from 6.0.16 to 6.0.17
Actions
Copy link
 #10

Updated by Jeff Lucovsky 9 months ago

@Victor Julien Is this still needed for 6.0.x?

Actions
Copy link
 #11

Updated by Victor Julien 9 months ago

  • Target version changed from 6.0.17 to 6.0.18
Actions
Copy link
 #12

Updated by Victor Julien 8 months ago

  • Target version changed from 6.0.18 to 6.0.19
Actions
Copy link
 #13

Updated by Victor Julien 7 months ago

  • Target version changed from 6.0.19 to 6.0.20
Actions
Copy link
 #14

Updated by Philippe Antoine 6 months ago

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: Atom PDF