Actions
Bug #5765
closedexceptions: midstream flows are dropped if midstream=true && stream.midstream-policy=drop-flow
Affected Versions:
Effort:
Difficulty:
Label:
Description
We understand that setting stream.midstream=true would mean there's an interest in accepting
midstream flows.
Having the engine drop packets or flows via the exception policy for midstream flows seems
counterintuitive, in such cases, then.
Current behavior:
If stream.midstream=true and stream.midstream-policy=drop-flow (or drop-packet), midstream flows will be dropped.
Expected behavior:
- If stream.midstream=true, Suricata will warn about the conflicting settings and ignore the
midstream exception policy.
Updated by Juliana Fajardini Reichow over 2 years ago
Probably configuration validation issue.
Updated by Juliana Fajardini Reichow over 2 years ago
- Status changed from In Progress to In Review
PR for review:
Updated by Juliana Fajardini Reichow over 2 years ago
- Status changed from In Review to Resolved
Merged PR: https://github.com/OISF/suricata/pull/8407
Actions