Project

General

Profile

Actions

Feature #4855

open

rules: refactor rule parsing into multi-stage parser

Added by Victor Julien almost 3 years ago. Updated over 1 year ago.

Status:
New
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

A number of open issues are around how modifiers are applied based on whether they directly follow a content statement.


Subtasks 4 (4 open0 closed)

Bug #1826: Rule validation bug with fast_pattern:only and specified buffersNewOISF DevActions
Bug #1926: rule parsing: wrong content checked for fast_pattern (snort compatibility)NewOISF DevActions
Bug #2205: Buffer confusion with fast_pattern:only;AssignedVictor JulienActions
Feature #3317: rules: use rust for tokenizing rulesFeedbackJason IshActions
Actions

Also available in: Atom PDF