Project

General

Profile

Actions
Copy link

Feature #262

closed

keyword 'ssl_version'

Added by Peter Manev about 14 years ago. Updated almost 14 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Gurvinder Singh
Target version:
1.1beta2
Effort:
Difficulty:
Label:

Description

unknown rule keyword 'ssl_version'

Example:

[9838] 20/12/2010 -- 11:50:19 - (detect-parse.c:655) <Error> (SigParseOptions) -- [ERRCODE: SC_ERR_RULE_KEYWORD_UNKNOWN(100)] - unknown rule keyword 'ssl_version'.

[9838] 20/12/2010 -- 11:50:19 - (detect.c:526) <Error> (DetectLoadSigFile) -- [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - Error parsing signature "alert tcp $EXTERNAL_NET any -> $HOME_NET 443 (msg:"WEB-MISC TLSv1 Client_Certificate handshake"; flow:established, to_server; ssl_version:tls1.0; content:"|16 03 01|"; depth:3; content:"|0B|"; depth:1; offset:5; flowbits:set,tlsv1.client_hello.certificate; flowbits:noalert; metadata:service http; classtype:protocol-command-decode; sid:17748; rev:1;)" from file /etc/suricata/rules/web-misc.rules at line 619

Actions
Copy link

Also available in: Atom PDF