Project

General

Profile

Actions

Bug #5031

open

flowbits - no error on invalid options

Added by Brandon Murphy over 2 years ago. Updated 7 months ago.

Status:
Assigned
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

as per https://redmine.openinfosecfoundation.org/issues/4786#note-8 - creating a new issue

sid 7, despite not having a valid option provided, does not produce an error/warning from suricata.

alert http any any -> any any (msg:"flowbits with noalert option"; flow:established,to_server; http.method; content:"POST"; flowbits:set,ET.whatever,asdfasdf; sid:7;)


Related issues 3 (1 open2 closed)

Related to Suricata - Optimization #5207: Common Rust parser for *bitsAssignedShivani BhardwajActions
Copied to Suricata - Bug #5154: flowbits - no error on invalid optionsClosedShivani BhardwajActions
Copied to Suricata - Bug #5155: flowbits - no error on invalid optionsRejectedJeff LucovskyActions
Actions

Also available in: Atom PDF