Project

General

Profile

Actions

Bug #2973

open

the flow after match the rules

Added by John Smith over 3 years ago. Updated over 3 years ago.

Status:
New
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

if a package match a rule and the rule's action is 'pass',then suricata will set this flow no need to detect. So when I change this rule's action to 'drop',packages won't detect the rules and just pass (even I change the package)

Actions #1

Updated by Victor Julien over 3 years ago

  • Assignee deleted (Victor Julien)
  • Target version deleted (4.1.5)
  • Effort deleted (high)

Can you provide a test case in https://github.com/OISF/suricata-verify ?

Actions #2

Updated by Andreas Herz over 3 years ago

  • Assignee set to John Smith
  • Target version set to TBD
Actions

Also available in: Atom PDF