Skip to content

Instantly share code, notes, and snippets.

@jasonish
Created September 15, 2016 16:51
Show Gist options
  • Select an option

  • Save jasonish/c49ad9039d838121ef83e68c5999fe66 to your computer and use it in GitHub Desktop.

Select an option

Save jasonish/c49ad9039d838121ef83e68c5999fe66 to your computer and use it in GitHub Desktop.
static int FlowBitsTestSig01(void)
{
Signature *s = NULL;
DetectEngineCtx *de_ctx = NULL;
de_ctx = DetectEngineCtxInit();
FAIL_IF_NULL(de_ctx);
de_ctx->flags |= DE_QUIET;
s = de_ctx->sig_list = SigInit(de_ctx,"alert ip any any -> any any (msg:\"Noalert\"; flowbits:noalert,wrongusage; content:\"GET \"; sid:1;)");
FAIL_IF_NOT_NULL(s);
SigGroupCleanup(de_ctx);
SigCleanSignatures(de_ctx);
DetectEngineCtxFree(de_ctx);
PASS;
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment