Project

General

Profile

Actions

Bug #2605

closed

engine-analysis warning on PCRE

Added by Peter Manev about 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Using sid: 2830193 with the current gitmaster with "--engine-analysis" - we have this warning on PCRE

 Rule matches on http uri buffer.
    App layer protocol is http.
    Rule contains 0 content options, 6 http content options, 1 pcre
options, and 0 pcre options with http modifiers.
    Fast Pattern "/wpapi/" on "http request uri (http_uri)" buffer.
    Warning: Rule uses content options with http_* and pcre options
without http modifiers.
             -Consider adding http pcre modifier.

Consider PCRE on http buffer


In that case then it seems the warning here is not related as the PCRE is in the sticky buffer (request line).

Actions

Also available in: Atom PDF