Project

General

Profile

Actions

Support #3037

closed

The rules detect order

Added by John Smith over 3 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Affected Versions:
Label:

Description

suricata detect the signatures with ip at first;then tcp or udp;the last is alproto?
and if the rules have same proto,the order is pass,drop,reject,alert?
and if the rules have same action,the order is the sid number?

Actions

Also available in: Atom PDF