mirror of https://github.com/OISF/suricata
detect-parse: parse sid in pre-scan
During the pre-scan for "requires", also parse the SID if possible. If the rule fails high level parsing (syntax), the SID will not be parsed. But every keyword other than "sid" and "requires" should expect to be provided with a parsed sid.pull/10076/head
parent
435c03172e
commit
71bbba9248
Loading…
Reference in New Issue