Some errors are reported when starting Suricata:
[199226] 29/11/2021 – 13:47:56 - (detect-pcre.c:890) (DetectPcreSetup) – [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - Expression seen with a sticky buffer still set; either (1) reset sticky buffer with pkt_data or (2) use a sticky buffer providing “raw http uri”.
[199226] 29/11/2021 – 13:47:56 - (detect-engine-loader.c:185) (DetectLoadSigFile) – [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - error parsing signature “alert http any any <> any any (msg:“tongda OA Front desk SQL injecton”; http.method; content:“GET”; http.uri; content:”/pda/appcenter/submenu.php"; fast_pattern; http.uri; content:“appid”; pcre:"/(select|and|union|information_schema)/I"; nocase; reference:url,04T-2019-10831; classtype:web-application-attack; sid:80100083; rev:1;metadata: meta safe;)" from file /var/lib/suricata/rules/1.rules at line 97
[199226] 29/11/2021 – 13:47:56 - (detect-pcre.c:890) (DetectPcreSetup) – [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - Expression seen with a sticky buffer still set; either (1) reset sticky buffer with pkt_data or (2) use a sticky buffer providing “raw http uri”.
[199226] 29/11/2021 – 13:47:56 - (detect-engine-loader.c:185) (DetectLoadSigFile) – [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - error parsing signature “alert http any any → any any (msg:“TianQin SQLINJECTION”; flow:ESTABLISHED; http.method; content:“GET”; nocase; http.uri; content:“api/dp/loglastsync”; nocase; http.uri; content:“ccid=”; nocase; http.uri; content:”="; pcre:"/.+(’|%27|(table|copy|%63%6f%70%79|%74%61%62%6c%65))/I"; classtype:web-application-attack; sid:80000079;metadata: meta safe;)" from file /var/lib/suricata/rules/1.rules at line 104
[199226] 29/11/2021 – 13:47:56 - (detect-pcre.c:890) (DetectPcreSetup) – [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - Expression seen with a sticky buffer still set; either (1) reset sticky buffer with pkt_data or (2) use a sticky buffer providing “raw http uri”.
[199226] 29/11/2021 – 13:47:56 - (detect-engine-loader.c:185) (DetectLoadSigFile) – [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - error parsing signature “alert http any any → any any (msg:“SQL4”; flow:established,to_server; http.uri; content:”/Setting/Report/commonReport.html"; content:“managestatus”; pcre:"/(%27|’|%23)/I"; pcre:"/(select|information_schema|database|into|from|sleep|where|and|or)/I";classtype:web-application-attack; sid:80000206; metadata: meta safe,[AES];)" from file /var/lib/suricata/rules/1.rules at line 110
[199226] 29/11/2021 – 13:47:56 - (detect-pcre.c:890) (DetectPcreSetup) – [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - Expression seen with a sticky buffer still set; either (1) reset sticky buffer with pkt_data or (2) use a sticky buffer providing “raw http uri”.
[199226] 29/11/2021 – 13:47:56 - (detect-engine-loader.c:185) (DetectLoadSigFile) – [ERRCODE: SC_ERR_INVALID_SIGNATURE(39)] - error parsing signature “alert http any any → any any (msg:“SQL and 1=1”; flow:established,to_server; http.uri; content:”/"; content:“and”; pcre:"/(and 1=1|and%201=1|and%20%271%27=%271|and ‘1’='1)/I"; classtype:web-application-attack; metadata:meta safe, time 2021-02-24 11:35:13, attack_is “->”, commit “”, [AES], attempt; sid:80000205;)" from file /var/lib/suricata/rules/1.rules at line 126