From: Jamie Strandboge Date: Fri, 11 Jan 2013 13:21:08 +0000 (-0600) Subject: suppress: DETECT_SUPPRESS_REGEX should support IPv6 addresses too. Bug #697. X-Git-Tag: suricata-1.4.1~75 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=bc04090bc99241be5d55c8f38ba697b4dbda7c36;p=thirdparty%2Fsuricata.git suppress: DETECT_SUPPRESS_REGEX should support IPv6 addresses too. Bug #697. --- diff --git a/src/util-threshold-config.c b/src/util-threshold-config.c index 3b659c37cc..ca4f81df79 100644 --- a/src/util-threshold-config.c +++ b/src/util-threshold-config.c @@ -71,8 +71,9 @@ typedef enum ThresholdRuleType { * suppress has two form: * suppress gen_id 0, sig_id 0, track by_dst, ip 10.88.0.14 * suppress gen_id 1, sig_id 2000328 + * suppress gen_id 1, sig_id 2000328, track by_src, ip fe80::/10 */ -#define DETECT_SUPPRESS_REGEX "^,\\s*track\\s*(by_dst|by_src)\\s*,\\s*ip\\s*([\\d.:/]+)*\\s*$" +#define DETECT_SUPPRESS_REGEX "^,\\s*track\\s*(by_dst|by_src)\\s*,\\s*ip\\s*([\\da-fA-F.:/]+)*\\s*$" /* Default path for the threshold.config file */ #if defined OS_WIN32 || defined __CYGWIN__