Project

General

Profile

Actions
Copy link

Bug #8501

open
PA PA

detect/dns: dns.*.rrname keywords do not work with "alert udp" prefix

Bug #8501: detect/dns: dns.*.rrname keywords do not work with "alert udp" prefix

Added by Philippe Antoine 4 days ago. Updated 2 days ago.

Status:
Resolved
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Found with https://github.com/OISF/suricata/pull/15249

These keywords need rules that start with alert dns and cannot use a rule that start with alert udp or alert ip even if such rules are in the documentation

Subtasks 1 (1 open — 0 closed)

Bug #8502: detect/dns: dns.*.rrname keywords do not work with "alert udp" prefix (8.0.x backport)In ReviewPhilippe AntoineActions
Actions
Copy link

Also available in: PDF Atom