Project

General

Profile

Actions

Bug #689

closed

FN: IP-only rule ip_proto not matching for some protocols

Added by Victor Julien over 11 years ago. Updated over 11 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

IPv4 packet with protocol 41 didn't match on:

alert ip any any -> any any (ip_proto:41; sid:1;)

This is because it is considered an IP-only rule, but protocol check for IP-only is broken.

Actions #1

Updated by Victor Julien over 11 years ago

  • Status changed from Assigned to Closed
commit 5f4c52801e663f499abee4b5c004b6ca75ded4df
Author: Victor Julien <victor@inliniac.net>
Date:   Tue Dec 18 16:54:46 2012 +0100

    Fix protocol check for IP-only (#689).
Actions

Also available in: Atom PDF