Project

General

Profile

Actions
Copy link

Bug #6776

open
JF JF

exception/policy: bypass flow incorrect applied?

Bug #6776: exception/policy: bypass flow incorrect applied?

Added by Juliana Fajardini Reichow about 2 years ago. Updated 6 months ago.

Status:
Assigned
Priority:
Normal
Assignee:
Juliana Fajardini Reichow
Target version:
9.0.0-beta1
Affected Versions:
7.0.11, 8.0.1
Effort:
Difficulty:
Label:

Description

Exception policy scenarios such as defrag.memcap and flow.memcap are, according to our documentation,
only susceptible to packet-related exception policies.

Ensure that bypass isn't applied to those. Check all other cases, as well.

Decide what should be done for 7.

Subtasks 1 (1 open — 0 closed)

Bug #7934: exception/policy: bypass flow incorrect applied? (8.0.x backport)AssignedJuliana Fajardini ReichowActions

VJ Updated by Victor Julien almost 2 years ago Actions
Copy link
 #1

  • Assignee changed from Juliana Fajardini Reichow to OISF Dev

VJ Updated by Victor Julien about 1 year ago Actions
Copy link
 #2

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Juliana Fajardini Reichow
  • Target version changed from 8.0.0-beta1 to 8.0.0-rc1

VJ Updated by Victor Julien 10 months ago Actions
Copy link
 #3

  • Target version changed from 8.0.0-rc1 to 8.0.1

JF Updated by Juliana Fajardini Reichow 8 months ago ยท Edited Actions
Copy link
 #4

Definitely a bug with midstream enabled, target midstream... (our SV test updated to show the target exception policy in the flow even expects it: https://github.com/OISF/suricata-verify/blob/master/tests/exception-policy-master-switch/exception-policy-master-switch-05/test.yaml )
Test exception-policy-master-switch-02/ also shows this

JF Updated by Juliana Fajardini Reichow 7 months ago Actions
Copy link
 #5

  • Target version changed from 8.0.1 to 8.0.2
  • Affected Versions 7.0.11, 8.0.1 added

VJ Updated by Victor Julien 6 months ago Actions
Copy link
 #6

  • Target version changed from 8.0.2 to 9.0.0-beta1
  • Label Needs backport to 8.0 added

OT Updated by OISF Ticketbot 6 months ago Actions
Copy link
 #7

  • Subtask #7934 added

OT Updated by OISF Ticketbot 6 months ago Actions
Copy link
 #8

  • Label deleted (Needs backport to 8.0)
Actions
Copy link

Also available in: PDF Atom