Project

General

Profile

Actions
Copy link

Bug #7772

closed
SB SB

Bug #7638: detect: incorrect rule ordering with more complex flowbit chains

Task #8656: flowbits: warn on invalid command combinations

flowbits: invalid set and isset combinations are accepted

Bug #7772: flowbits: invalid set and isset combinations are accepted

Added by Shivani Bhardwaj about 1 year ago. Updated about 1 month ago.

Status:
Closed
Priority:
High
Assignee:
Shivani Bhardwaj
Target version:
9.0.0-beta1
Affected Versions:
8.0.0
Effort:
Difficulty:
low
Label:

Description

For example, rules like

alert tcp any any -> any any (msg:"set + isset flowbit"; http.method; content:"GET"; flowbits:set,abc; flowbits:isset,abc; sid:111)

Actions
Copy link

Also available in: PDF Atom