Project

General

Profile

Actions

Bug #8799

closed

Automatic flowbit resolution setting does not match description

Added by Anonymous over 5 years ago. Updated over 5 years ago.

Status:
Resolved
Priority:
Normal-package
Assignee:
-
Category:
Suricata
Target version:
Start date:
08/18/2018
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
2.4.4
Affected Plus Version:
Affected Architecture:

Description

On 2.4.4.a.20180817.2020, install suricata (version 4.0.13_3), add an interface, visit the Categories tab and see that the Automatic flowbit resolution setting is unchecked. Below that, notice the message that reads:

Default is Checked. Suricata will examine the enabled rules in your chosen rule categories for checked flowbits. Any rules that set these dependent flowbits will be automatically enabled and added to the list of files in the interface rules directory.
Actions #1

Updated by Anonymous over 5 years ago

  • Priority changed from Normal to Normal-package
Actions #2

Updated by Anonymous over 5 years ago

  • Status changed from New to In Progress
  • Assignee set to Anonymous
Actions #3

Updated by Anonymous over 5 years ago

  • Status changed from In Progress to Feedback

Fix Pushed: c5901e3e38a7cefdc46f74734586f2f4b868a33f
The checkbox should now default to being checked.

Actions #4

Updated by Anonymous over 5 years ago

On a fresh install of pfSense-CE-memstick-2.4.4-DEVELOPMENT-amd64-20180823-0720, install suricata (version 4.0.13_5), go to services > suricata, click add interface, go to Iface Categories and notice that Resolve Flowbits is still unchecked.

Actions #5

Updated by Anonymous over 5 years ago

  • Status changed from Feedback to In Progress
Actions #6

Updated by Anonymous over 5 years ago

  • Status changed from In Progress to Feedback

This should be fixed now. 53261ab40f32f234e3432e15f5633f149b36863d
Version 4.0.13_7

Actions #7

Updated by Anonymous over 5 years ago

On suricata 4.0.13_17, works as expected.

Actions #8

Updated by Anonymous over 5 years ago

  • Status changed from Feedback to Resolved
Actions

Also available in: Atom PDF