Project

General

Profile

Actions

Support #3013

closed

The rules detect order

Added by John Smith over 3 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Affected Versions:
Label:

Description

Does suricata detect the rules which action is "pass" at first;Then the rules with "alert"\"drop"?
And if two rules have the same action like 'alert',suricata will detect the rule which have a small id?
I just want to known the order that how suricat detect the rules.
Please give me some suggestions,thank you very much!

Actions

Also available in: Atom PDF