[Snort-devel] host_tracker.IP bug
Tom Peters (thopeter)
thopeter at cisco.com
Thu Oct 4 13:14:57 EDT 2018
Thanks for reporting this.
The Snort3 standard is to use lower case letters to spell configuration parameters.
The parameter should have been named host_tracker.ip instead of host_tracker.IP. We will make that change.
From: Snort-devel <snort-devel-bounces at lists.snort.org<mailto:snort-devel-bounces at lists.snort.org>> on behalf of Meridoff via Snort-devel <snort-devel at lists.snort.org<mailto:snort-devel at lists.snort.org>>
Reply-To: Meridoff <oagvozd at gmail.com<mailto:oagvozd at gmail.com>>
Date: Thursday, October 4, 2018 at 11:37 AM
To: "snort-devel at lists.snort.org<mailto:snort-devel at lists.snort.org>" <snort-devel at lists.snort.org<mailto:snort-devel at lists.snort.org>>
Subject: [Snort-devel] host_tracker.IP bug
Hello, found that in snort-3.0 beta 247 bug in host_tracker:
bool HostTrackerModule::set(const char*, Value& v, SnortConfig* sc)
if ( host and v.is<http://v.is>("ip") // must be "IP" (as defined in HostTrackerModule::host_tracker_params)
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-devel