Project

General

Profile

Actions

Bug #8015

closed
JL JL

detect/ip.src: does not load with lua transform

Bug #8015: detect/ip.src: does not load with lua transform

Added by Jeff Lucovsky 5 months ago. Updated 5 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

With a rule containing ip.src; luaxform: somescript.lua; Suricata refused to load it and emits an error message "transforms must directly follow stickybuffers".

ip.src (and ip.dst) are sticky buffers.


Subtasks 1 (0 open1 closed)

Bug #8016: detect/ip.src: does not load with lua transform (8.0.x backport)ClosedJeff LucovskyActions

OT Updated by OISF Ticketbot 5 months ago Actions #1

  • Subtask #8016 added

OT Updated by OISF Ticketbot 5 months ago Actions #2

  • Label deleted (Needs backport to 8.0)

SB Updated by Shivani Bhardwaj 5 months ago Actions #3

  • Subject changed from detect/ip.src: unable to use with transform to detect/ip.src: does not load with lua transform

JL Updated by Jeff Lucovsky 5 months ago Actions #4

  • Status changed from Assigned to Resolved

JL Updated by Jeff Lucovsky 5 months ago Actions #5

  • Status changed from Resolved to Closed
Actions

Also available in: PDF Atom