Project

General

Profile

Actions
Copy link

Support #3037

closed
JS

The rules detect order

Support #3037: The rules detect order

Added by John Smith almost 7 years ago. Updated almost 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Affected Versions:
Label:

Description

suricata detect the signatures with ip at first;then tcp or udp;the last is alproto?
and if the rules have same proto,the order is pass,drop,reject,alert?
and if the rules have same action,the order is the sid number?

AH Updated by Andreas Herz almost 7 years ago Actions
Copy link
 #1

  • Target version set to TBD

VJ Updated by Victor Julien almost 7 years ago Actions
Copy link
 #2

  • Assignee deleted (Shivani Bhardwaj)

AH Updated by Andreas Herz almost 7 years ago Actions
Copy link
 #3

  • Status changed from New to Closed

dupliocate of #3013

Actions
Copy link

Also available in: PDF Atom