Project

General

Profile

Actions
Copy link

Bug #220

closed

Add support for missing http related snort 2.8.5.x pcre modifiers.

Added by Will Metcalf over 14 years ago. Updated over 14 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Pablo Rincon
Target version:
1.0.2
Affected Versions:
Effort:
Difficulty:
Label:

Description

From the Snort manual... We are missing support for the following http related pcre modifiers for 2.8.5.3 support. Seems SF is using at least the 'H' modifier now pretty extensively in VRT rules. Should probably be a task.

H Match normalized HTTP request header (Similar to http header)
M Match normalized HTTP request method (Similar to http method)
C Match normalized HTTP request cookie (Similar to http cookie)

Files

0001-Adding-modifiers-C-H-and-M-to-pcre-http-cookie-heade.patch (35.7 KB) 0001-Adding-modifiers-C-H-and-M-to-pcre-http-cookie-heade.patch Victor Julien, 08/30/2010 03:00 AM
Actions
Copy link

Also available in: Atom PDF