Project

General

Profile

Actions

Task #5318

closed

tests: craft an SV for rate_filter

Added by Juliana Fajardini Reichow almost 2 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

We want to ensure that the engine behaves as expected when rate-filter is applied triggering the `new_action` keyword, which could change alert action and also possibly the order of alerts in the logs.

Cf. https://suricata.readthedocs.io/en/latest/configuration/global-thresholds.html?highlight=global%20threshold#rate-filter


Related issues 1 (0 open1 closed)

Related to Suricata - Feature #425: Inspect the effects of mixing threshold and detection filters etc..ClosedCommunity TicketActions
Actions

Also available in: Atom PDF