Project

General

Profile

Actions
Copy link

Feature #258

closed

keyword 'ssl_state'

Added by Peter Manev almost 14 years ago. Updated over 13 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
1.1beta2
Effort:
Difficulty:
Label:

Description

unknown rule keyword 'ssl_state'

Example:

[9838] 20/12/2010 -- 11:50:19 - (detect-parse.c:655) <Error> (SigParseOptions) -- [ERRCODE: SC_ERR_RULE_KEYWORD_UNKNOWN(100)] - unknown rule keyword 'ssl_state'.

[9838] 20/12/2010 -- 11:50:19 - (detect.c:526) <Error> (DetectLoadSigFile) -- [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - Error parsing signature "alert tcp $EXTERNAL_NET 443 -> $HOME_NET any (msg:"WEB-CLIENT Windows schannel security package"; flow:established, to_client; ssl_state:server_hello; content:"|16 03 00|"; content:"|0C|"; within:1; distance:2; byte_jump:2,3,relative,big; byte_jump:2,0,relative,big; content:"|00 00|"; within:2; reference:cve,2007-2218; reference:url,www.microsoft.com/technet/security/bulletin/MS07-031.mspx; classtype:attempted-user; sid:11947; rev:5;)" from file /etc/suricata/rules/web-client.rules at line 180

Actions
Copy link

Also available in: Atom PDF