Project

General

Profile

Actions
Copy link

Bug #8015

open

detect/ip.src: unable to use with transform

Added by Jeff Lucovsky 2 days ago. Updated 2 days ago.

Status:
Assigned
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

With a rule containing ip.src; luaxform: somescript.lua; Suricata refused to load it and emits an error message "transforms must directly follow stickybuffers".

ip.src (and ip.dst) are sticky buffers.

Subtasks 1 (1 open — 0 closed)

Bug #8016: detect/ip.src: unable to use with transform (8.0.x backport)AssignedJeff LucovskyActions
Actions
Copy link
 #1

Updated by OISF Ticketbot 2 days ago

  • Subtask #8016 added
Actions
Copy link
 #2

Updated by OISF Ticketbot 2 days ago

  • Label deleted (Needs backport to 8.0)
Actions
Copy link

Also available in: Atom PDF