Re: host_tracker.IP bug
"Tom Peters \(thopeter\) via Snort-devel" <[email protected]> Thu, 4 Oct 2018 17:14:57 +0000
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <D7DBC0D1.4C8CE%[email protected]> |
Hi, Thanks for reporting this. The Snort3 standard is to use lower case letters to spell configuration parameters. The parameter should have been named host_tracker.ip instead of host_tracker.IP. We will make that change. Tom From: Snort-devel <[email protected]<mailto:[email protected]>> on behalf of Meridoff via Snort-devel <[email protected]<mailto:[email protected]>> Reply-To: Meridoff <[email protected]<mailto:[email protected]>> Date: Thursday, October 4, 2018 at 11:37 AM To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>> Subject: [Snort-devel] host_tracker.IP bug Hello, found that in snort-3.0 beta 247 bug in host_tracker: bool HostTrackerModule::set(const char*, Value& v, SnortConfig* sc) { if ( host and v.is<http://v.is>("ip") // must be "IP" (as defined in HostTrackerModule::host_tracker_params) _______________________________________________ Snort-devel mailing list [email protected] https://lists.snort.org/mailman/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort!