Feature #259
closedregex modifier 'I'
Description
[ERRCODE: SC_ERR_UNKNOWN_REGEX_MOD(129)] - unknown regex modifier 'I'
Example:
[9838] 20/12/2010 -- 11:50:19 - (detect-pcre.c:862) <Error> (DetectPcreParse) -- [ERRCODE: SC_ERR_UNKNOWN_REGEX_MOD(129)] - unknown regex modifier 'I'
[9838] 20/12/2010 -- 11:50:19 - (detect.c:526) <Error> (DetectLoadSigFile) -- [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - Error parsing signature "alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-IIS source code disclosure attempt"; flow:to_server,established; content:"Translate|3A| "; nocase; byte_test:1,=,102,0,relative; pcre:"/%.*%/smiI"; metadata:service http; reference:bugtraq,14764; classtype:attempted-recon; sid:17648; rev:1;)" from file /etc/suricata/rules/web-iis.rules at line 177
Updated by Anoop Saldanha almost 14 years ago
Victor Julien wrote:
What buffer does this inspect?
raw uri
Updated by Victor Julien almost 14 years ago
- Assignee set to Victor Julien
- Target version set to 1.1beta2
Thanks Anoop.
This will be part of a task for a OISF dev.
Updated by Victor Julien over 13 years ago
- Status changed from New to Assigned
- Assignee changed from Victor Julien to Anoop Saldanha
Updated by Victor Julien over 13 years ago
- Status changed from Assigned to Closed
- % Done changed from 0 to 100
Patches are applied to the current git master.