Actions
Documentation #5465
opendoc/userguide: document terminating behavior of rule actions
Affected Versions:
Effort:
Difficulty:
Label:
Description
Various actions have different "terminating behaviors" in different scenarios.
e.g.:
alert will not terminate, but is limited to a max number of alerts per packet in the output
pass will immediately stop logging more alerts for the same packet and future alerts in the flow
drop will currently log all alerts for a packet, then drop the rest of the flow
Actions