Project

General

Profile

Actions
Copy link

Bug #4259

closed

Multiple modifications to a rule do not work

Added by Jason Ish almost 4 years ago. Updated almost 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
1.2.4
Affected Versions:
1.2.0
Effort:
Difficulty:
Label:

Description

Given 2 or more entries in the modify.conf file that would apply to the same rule, only the last one affects the output. For example, given a modify.conf of

re:"GPL\ WORM" "alert(.*)" "drop\1" 
re:"GPL\ WORM" 1434 5555

only the last line will take affect, and the rule will be left in the "alert" state.

Actions
Copy link

Also available in: Atom PDF