Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
Giuseppe Longo d592d57039 file_data: check for signature alproto and flow
Currently the following rule can't be loaded:
alert tcp any any -> any 25 (msg:"SMTP file_data test"; flow:to_server,established; file_data; content:"abc";sid:1;)
and produces the error output:
"Can't use file_data with flow:to_server or from_client with http or smtp."

This checks if the alproto is not http in a signature,
so permits to use flow keyword also.

Issue reported by rmkml.
11 years ago
benches
contrib suri-graphite: add ouput to file option 11 years ago
doc Fix make distcheck on CentOS 5.11 12 years ago
lua output-lua: add SCPacketTimeString 12 years ago
m4 Prelude plugin: add detection in configure script 17 years ago
qa parsing: s/strtok/strtok_r/g 11 years ago
rules decode: add ERSPANv1 decoder 11 years ago
scripts suricatasc: allow for longer response times after connect 11 years ago
src file_data: check for signature alproto and flow 11 years ago
.gitignore unittest: make check use a qa/log dir for logging 13 years ago
.travis.yml travis-ci: use make check 12 years ago
COPYING
ChangeLog Update changelog for 2.1beta4 release 11 years ago
LICENSE import of gplv2 LICENSE 17 years ago
Makefile.am Respect DESTDIR in install-conf and install-rules. 12 years ago
Makefile.cvs
acsite.m4 Added C99 defs/macros to acsite.m4 for CentOS 17 years ago
autogen.sh OpenBSD 5.2 build fixes, Unit test fix. 14 years ago
classification.config Import of classification.config 17 years ago
config.rpath Add file needed for some autotools version. 13 years ago
configure.ac Feature #1440: support wildcards in rule filenames 11 years ago
doxygen.cfg doxygen: add source browser 12 years ago
reference.config Update reference.config 12 years ago
suricata.yaml.in app-layer-htp: add http_body_inline setting 11 years ago
threshold.config threshold: improve comments of shipped threshold.config, add links to wiki. 14 years ago