https://redmine.openinfosecfoundation.org/https://redmine.openinfosecfoundation.org/favicon.ico?17011170022021-09-11T06:27:12ZOpen Information Security FoundationSuricata - Bug #4672: PR 6336 QA alert deviationhttps://redmine.openinfosecfoundation.org/issues/4672?journal_id=206242021-09-11T06:27:12ZPeter Manevpetermanev@gmail.com
<ul></ul><p>Seems related mostly to http_useragent/to_server.<br />I have not found a single stream reproducible case so far. <br />There are no memcap hits during the run</p> Suricata - Bug #4672: PR 6336 QA alert deviationhttps://redmine.openinfosecfoundation.org/issues/4672?journal_id=206452021-09-13T12:46:11ZCorey Thomas
<ul></ul><p>Neither have I. Alerts that show up in only baseline and only test run have the same type of rules (to_server and some user agents)</p> Suricata - Bug #4672: PR 6336 QA alert deviationhttps://redmine.openinfosecfoundation.org/issues/4672?journal_id=214502021-11-26T06:59:11ZVictor Julienvictor@inliniac.net
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Closed</i></li></ul><p>Fix tracked in <a class="issue tracker-1 status-5 priority-4 priority-default closed" title="Bug: detect: too many prefilter engines lead to FNs (Closed)" href="https://redmine.openinfosecfoundation.org/issues/4685">#4685</a></p> Suricata - Bug #4672: PR 6336 QA alert deviationhttps://redmine.openinfosecfoundation.org/issues/4672?journal_id=216602021-12-15T08:01:47ZVictor Julienvictor@inliniac.net
<ul><li><strong>Private</strong> changed from <i>Yes</i> to <i>No</i></li></ul> Suricata - Bug #4672: PR 6336 QA alert deviationhttps://redmine.openinfosecfoundation.org/issues/4672?journal_id=260012022-12-07T06:40:22ZVictor Julienvictor@inliniac.net
<ul><li><strong>Target version</strong> set to <i>QA</i></li></ul>