Project

General

Profile

Actions

Bug #4440

closed

eve: log if flow had gap

Added by Eric Leblond almost 3 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

It is currently not possible to know if a flow had a gap. As a result it may be hard to debug a suricata setup to know which flow are badly captured and maybe should be bypassed/dropped.

Actions

Also available in: Atom PDF