Project

General

Profile

Actions
Copy link

Support #3037

closed

The rules detect order

Added by John Smith almost 5 years ago. Updated almost 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Affected Versions:
Label:

Description

suricata detect the signatures with ip at first;then tcp or udp;the last is alproto?
and if the rules have same proto,the order is pass,drop,reject,alert?
and if the rules have same action,the order is the sid number?

Actions
Copy link

Also available in: Atom PDF