]> git.ipfire.org Git - thirdparty/suricata-verify.git/commitdiff
tests: remove unneeded flowbit ops
authorShivani Bhardwaj <shivani@oisf.net>
Thu, 9 Apr 2026 11:09:56 +0000 (16:39 +0530)
committerVictor Julien <vjulien@oisf.net>
Fri, 1 May 2026 19:17:47 +0000 (19:17 +0000)
flowbits are used unnecessarily in these rules. Clean them up.

tests/geoip/test.rules

index 213a091650266e2ebcad988e4a128b0acca593b0..5e8669262cc6a09e70c97868778700ab3b56bd0b 100644 (file)
@@ -1,2 +1,2 @@
-alert tcp any any -> any any (msg:"French IP"; flow:established,to_server; geoip:dst,FR; sid:1; rev:1; flowbits:isnotset,french; flowbits:set,french;)
-alert tcp any any -> any any (msg:"German IP"; flow:established,to_server; geoip: dst,DE; sid:2; rev:1; flowbits:isnotset,german; flowbits:set,german;)
+alert tcp any any -> any any (msg:"French IP"; flow:established,to_server; geoip:dst,FR; sid:1; rev:1;)
+alert tcp any any -> any any (msg:"German IP"; flow:established,to_server; geoip: dst,DE; sid:2; rev:1;)