Project

General

Profile

Actions
Copy link

Bug #4259

closed

Multiple modifications to a rule do not work

Added by Jason Ish almost 4 years ago. Updated almost 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
1.2.4
Affected Versions:
1.2.0
Effort:
Difficulty:
Label:

Description

Given 2 or more entries in the modify.conf file that would apply to the same rule, only the last one affects the output. For example, given a modify.conf of

re:"GPL\ WORM" "alert(.*)" "drop\1" 
re:"GPL\ WORM" 1434 5555

only the last line will take affect, and the rule will be left in the "alert" state.

Actions
Copy link
 #1

Updated by Jason Ish almost 3 years ago

  • Assignee changed from Shivani Bhardwaj to Jason Ish
Actions
Copy link
 #2

Updated by Jason Ish almost 3 years ago

This also affects the case where a rule may be modified and dropped. Only the modification takes affect.

Actions
Copy link
 #3

Updated by Jason Ish almost 3 years ago

  • Status changed from New to In Progress
  • Target version set to 1.3.0
Actions
Copy link
 #5

Updated by Jason Ish almost 3 years ago

  • Status changed from In Progress to Closed

Merged.

Actions
Copy link
 #6

Updated by Jason Ish almost 3 years ago

  • Target version changed from 1.3.0 to 1.2.4
Actions
Copy link

Also available in: Atom PDF