Project

General

Profile

Actions
Copy link

Bug #8015

open

detect/ip.src: unable to use with transform

Added by Jeff Lucovsky 3 days ago. Updated 3 days ago.

Status:
Assigned
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

With a rule containing ip.src; luaxform: somescript.lua; Suricata refused to load it and emits an error message "transforms must directly follow stickybuffers".

ip.src (and ip.dst) are sticky buffers.

Subtasks 1 (1 open — 0 closed)

Bug #8016: detect/ip.src: unable to use with transform (8.0.x backport)AssignedJeff LucovskyActions
Actions
Copy link

Also available in: Atom PDF