util-threshold-config: parse suppress rules with spaces in ip list

This modified regex allows spaces witihn the ip list for supress rules
like [10.0.0.1, 10.0.0.2]
pull/2160/head
Andreas Herz 10 years ago committed by Victor Julien
parent f0e22c91cb
commit e9a2a341ce

@ -73,7 +73,7 @@ typedef enum ThresholdRuleType {
* suppress gen_id 1, sig_id 2000328 * suppress gen_id 1, sig_id 2000328
* suppress gen_id 1, sig_id 2000328, track by_src, ip fe80::/10 * suppress gen_id 1, sig_id 2000328, track by_src, ip fe80::/10
*/ */
#define DETECT_SUPPRESS_REGEX "^,\\s*track\\s*(by_dst|by_src|by_either)\\s*,\\s*ip\\s*([\\[\\],\\$\\da-zA-Z.:/_]+)*\\s*$" #define DETECT_SUPPRESS_REGEX "^,\\s*track\\s*(by_dst|by_src|by_either)\\s*,\\s*ip\\s*([\\[\\],\\$\\s\\da-zA-Z.:/_]+)*\\s*$"
/* Default path for the threshold.config file */ /* Default path for the threshold.config file */
#if defined OS_WIN32 || defined __CYGWIN__ #if defined OS_WIN32 || defined __CYGWIN__

Loading…
Cancel
Save