Bug #5940: exception/policy: flow action doesn't fall back to packet action when there's no flow - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #5940

closed

exception/policy: flow action doesn't fall back to packet action when there's no flow

Added by Juliana Fajardini Reichow over 1 year ago. Updated over 1 year ago.

Status:

Closed

Priority:

Normal

Assignee:

Juliana Fajardini Reichow

Target version:

7.0.0-rc2

Affected Versions:

Effort:

Difficulty:

Label:

Description

Defrag memcap and flow memcap do not support flow action for the exception policies, as there is no flow when the exception condition is hit. In such cases, the exception policy must be considered for the packet only, when that makes sense, or should be ignored, in case of bypass.

Subtasks 1 (0 open — 1 closed)