Project

General

Profile

Actions

Bug #5578

closed

rules: stateful drop on dsize sig with app proto set

Added by Victor Julien about 2 years ago. Updated 7 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

drop http any any -> any any (dsize:0; sid:1;)

This should not lead to a flow drop, as it contains a match on packet properties (dsize).
Actions #1

Updated by Victor Julien almost 2 years ago

  • Target version changed from 7.0.0-rc1 to 7.0.0-rc2
Actions #2

Updated by Victor Julien over 1 year ago

  • Target version changed from 7.0.0-rc2 to 7.0.0
Actions #3

Updated by Victor Julien over 1 year ago

  • Priority changed from Normal to High
Actions #4

Updated by Victor Julien over 1 year ago

  • Status changed from Assigned to New
  • Assignee changed from Victor Julien to OISF Dev
  • Priority changed from High to Normal
  • Target version changed from 7.0.0 to 6.0.14

This is not an issue in 7.

Tests added in https://github.com/OISF/suricata-verify/pull/1285

Actions #5

Updated by Victor Julien over 1 year ago

  • Target version changed from 6.0.14 to 6.0.15
Actions #6

Updated by Shivani Bhardwaj about 1 year ago

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Jeff Lucovsky
Actions #7

Updated by Victor Julien about 1 year ago

  • Target version changed from 6.0.15 to 6.0.16
Actions #8

Updated by Philippe Antoine 11 months ago

  • Status changed from Assigned to In Review
Actions #9

Updated by Victor Julien 11 months ago

  • Target version changed from 6.0.16 to 6.0.17
Actions #10

Updated by Jeff Lucovsky 10 months ago

@Victor Julien Is this still needed for 6.0.x?

Actions #11

Updated by Victor Julien 10 months ago

  • Target version changed from 6.0.17 to 6.0.18
Actions #12

Updated by Victor Julien 9 months ago

  • Target version changed from 6.0.18 to 6.0.19
Actions #13

Updated by Victor Julien 8 months ago

  • Target version changed from 6.0.19 to 6.0.20
Actions #14

Updated by Philippe Antoine 7 months ago

  • Status changed from In Review to Closed
Actions

Also available in: Atom PDF