Project

General

Profile

Actions

Bug #8501

open
PA PA

detect/dns: dns.*.rrname keywords do not work with "alert udp" prefix

Bug #8501: detect/dns: dns.*.rrname keywords do not work with "alert udp" prefix

Added by Philippe Antoine 4 days ago. Updated 2 days ago.

Status:
Resolved
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Found with https://github.com/OISF/suricata/pull/15249

These keywords need rules that start with alert dns and cannot use a rule that start with alert udp or alert ip even if such rules are in the documentation


Subtasks 1 (1 open0 closed)

Bug #8502: detect/dns: dns.*.rrname keywords do not work with "alert udp" prefix (8.0.x backport)In ReviewPhilippe AntoineActions

OT Updated by OISF Ticketbot 4 days ago Actions #1

  • Subtask #8502 added

OT Updated by OISF Ticketbot 4 days ago Actions #2

  • Label deleted (Needs backport to 8.0)

PA Updated by Philippe Antoine 4 days ago Actions #3

  • Status changed from In Progress to In Review

PA Updated by Philippe Antoine 2 days ago Actions #4

  • Status changed from In Review to Resolved
Actions

Also available in: PDF Atom