Actions
Bug #1697
closedbyte_extract incompatibility with Snort.
Affected Versions:
Effort:
Difficulty:
Label:
Description
Test with TALOS subscriber ruleset, Feb. 7 2016.
Suricata fails to parse a rule with the error:
[ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - Base not specified for byte_extract, though string was specified. The right options are (string, hex), (string, oct) or (string, dec)
And the relevant part of the rule being:
byte_extract:10,0,colspan,relative,string;
Actions