File tree Expand file tree Collapse file tree 2 files changed +37
-0
lines changed
tests/bug-7638-flowbits-sigorder-01 Expand file tree Collapse file tree 2 files changed +37
-0
lines changed Original file line number Diff line number Diff line change
1
+ alert http any any -> any any (http.uri; content:"down"; flowbits:set,uritest; sid:11;)
2
+ alert http any any -> any any (http.user_agent; content:"Mozilla"; flowbits:isset, headtest; flowbits:set,moz; sid:10;)
3
+ alert http any any -> any any (http.method; content:"GET"; flowbits:isset,uritest; flowbits:set,headtest; sid:12;)
4
+ alert http any any -> any any (http.host; content:"ether"; flowbits:isset,moz; sid:14;)
Original file line number Diff line number Diff line change
1
+ requires :
2
+ min-version : 8.0
3
+
4
+ pcap : false
5
+
6
+ args :
7
+ - --engine-analysis
8
+
9
+ checks :
10
+ - filter :
11
+ filename : rules.json
12
+ count : 1
13
+ match :
14
+ __lineno : 1
15
+ id : 11
16
+ - filter :
17
+ filename : rules.json
18
+ count : 1
19
+ match :
20
+ __lineno : 2
21
+ id : 12
22
+ - filter :
23
+ filename : rules.json
24
+ count : 1
25
+ match :
26
+ __lineno : 3
27
+ id : 10
28
+ - filter :
29
+ filename : rules.json
30
+ count : 1
31
+ match :
32
+ __lineno : 4
33
+ id : 14
You can’t perform that action at this time.
0 commit comments