Project

General

Profile

Actions
Copy link

Bug #8166

open

Bug #7638: detect: incorrect rule ordering with more complex flowbit chains

flowbits: invalid unset + toggle combinations are accepted

Added by Shivani Bhardwaj 1 day ago. Updated 1 day ago.

Status:
In Review
Priority:
High
Assignee:
Shivani Bhardwaj
Target version:
9.0.0-beta1
Affected Versions:
8.0.0
Effort:
Difficulty:
low
Label:

Description

For example, a rule like:

alert tcp any any -> any any (msg:"unset + toggle"; http.method; content:"GET"; flowbits:unset,abc; flowbits:toggle,abc; sid:111;)

Actions
Copy link
 #1

Updated by Shivani Bhardwaj 1 day ago

  • Status changed from Assigned to In Review
Actions
Copy link

Also available in: Atom PDF