Project

General

Profile

Actions
Copy link

Bug #5447

open

Suricata-Update: Respect rule GID

Added by Jason Ish over 2 years ago. Updated 7 months ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Affected Versions:
1.2.4
Effort:
Difficulty:
Label:

Description

Suricata considers the gid when determine the ID of a rule. For example, sid:1; gid:1; is a different rule and does not conflict with sid:1; gid:2;, even tho the sid is the same.

Suricata-Update currently does not respect the gid field at all, so will throw one away, taking the one with the highest rev if provided.

Actions
Copy link

Also available in: Atom PDF