Bug #964: Modify negated content handling - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #964

closed

Modify negated content handling

Added by Anoop Saldanha over 11 years ago. Updated over 11 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Anoop Saldanha

Target version:

2.0beta2

Affected Versions:

Effort:

Difficulty:

Label:

Description

The old behaviour of returning a failure if we found a pattern while
matching on negated content is now changed to continuing searching
for other combinations where we don't find the pattern for the
negated content.

Previousyly we would discontinue matching if we found match on a negated content, but with relative you might find other combinations where you may not find a relative negated content.