Project

General

Profile

Bug #8799

Automatic flowbit resolution setting does not match description

Added by James Dekker over 1 year ago. Updated over 1 year ago.

Status:
Resolved
Priority:
Normal-package
Assignee:
-
Category:
Suricata
Target version:
Start date:
08/18/2018
Due date:
% Done:

0%

Estimated time:
Affected Version:
2.4.4
Affected Architecture:

Description

On 2.4.4.a.20180817.2020, install suricata (version 4.0.13_3), add an interface, visit the Categories tab and see that the Automatic flowbit resolution setting is unchecked. Below that, notice the message that reads:

Default is Checked. Suricata will examine the enabled rules in your chosen rule categories for checked flowbits. Any rules that set these dependent flowbits will be automatically enabled and added to the list of files in the interface rules directory.

History

#1 Updated by Steve Beaver over 1 year ago

  • Priority changed from Normal to Normal-package

#2 Updated by Anonymous over 1 year ago

  • Status changed from New to In Progress
  • Assignee set to Anonymous

#3 Updated by Anonymous over 1 year ago

  • Status changed from In Progress to Feedback

Fix Pushed: c5901e3e38a7cefdc46f74734586f2f4b868a33f
The checkbox should now default to being checked.

#4 Updated by James Dekker over 1 year ago

On a fresh install of pfSense-CE-memstick-2.4.4-DEVELOPMENT-amd64-20180823-0720, install suricata (version 4.0.13_5), go to services > suricata, click add interface, go to Iface Categories and notice that Resolve Flowbits is still unchecked.

#5 Updated by Anonymous over 1 year ago

  • Status changed from Feedback to In Progress

#6 Updated by Anonymous over 1 year ago

  • Status changed from In Progress to Feedback

This should be fixed now. 53261ab40f32f234e3432e15f5633f149b36863d
Version 4.0.13_7

#7 Updated by James Dekker over 1 year ago

On suricata 4.0.13_17, works as expected.

#8 Updated by James Dekker over 1 year ago

  • Status changed from Feedback to Resolved

Also available in: Atom PDF