]> git.ipfire.org Git - thirdparty/suricata-update.git/log
thirdparty/suricata-update.git
8 years agorule parsing: don't warn if no msg present 5/head
Jason Ish [Fri, 3 Nov 2017 13:36:14 +0000 (07:36 -0600)] 
rule parsing: don't warn if no msg present

8 years agoissue 2261: don't fail on empty "local"
Jason Ish [Fri, 3 Nov 2017 13:34:51 +0000 (07:34 -0600)] 
issue 2261: don't fail on empty "local"

If local existed, but was empty, YAML would make it a None
value instead of the default empty list.

For local and sources, make sure they are an empty list after
loading instead of None.

8 years agorule testing: don't fail because of ASAN leak warnings
Victor Julien [Thu, 2 Nov 2017 14:20:26 +0000 (15:20 +0100)] 
rule testing: don't fail because of ASAN leak warnings

8 years agoFix Oinkmaster modifysid with group name.
Jason Ish [Thu, 2 Nov 2017 13:46:07 +0000 (07:46 -0600)] 
Fix Oinkmaster modifysid with group name.

Make the group name matcher the last matcher to be parsed,
and accept the match spec if it ends with .rules and not
prefixed with group.

This was broken while fixing up other issues in group name
parsing to make it more predictable.

8 years agoInitial import of Suricata-Update.
Jason Ish [Thu, 2 Nov 2017 13:03:16 +0000 (07:03 -0600)] 
Initial import of Suricata-Update.

Suricata-Update is a tool for updating Suricata rules. Based
on idstools-rulecat, but relicensed under the GPL and contributed
to the OISF.