Actions
Bug #7771
openBug #7638: detect: incorrect rule ordering with more complex flowbit chains
flowbits: cyclic dependencies in flowbits are accepted by the engine
Affected Versions:
Effort:
Difficulty:
high
Label:
Description
For example, rules like
alert http any any -> any any (http.user_agent; content:"Mozilla"; flowbits:isset, headtest; flowbits:set,moz; sid:10;)
alert http any any -> any any (http.method; content:"GET"; flowbits:set,headtest; flowbits:isset,moz; sid:12;)
Actions