Project

General

Profile

Actions
Copy link

Bug #7865

open

detect/integers: u8 prefilter does not support all modes

Added by Philippe Antoine 2 days ago. Updated 2 days ago.

Status:
In Review
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
8.0.1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Meaning a rule like alert icmp any any -> any any (itype: <= 8; prefilter; sid:3;). will not match even if alert icmp any any -> any any (itype: <= 8; sid:3;) will match

Subtasks 1 (1 open — 0 closed)

Bug #7866: detect/integers: u8 prefilter does not support all modes (7.0.x backport)AssignedPhilippe AntoineActions

Related issues 1 (1 open — 0 closed)

Related to Suricata - Task #6644: tracking: detect: integer as first-class supportIn ProgressPhilippe AntoineActions
Actions
Copy link

Also available in: Atom PDF