Project

General

Profile

Actions
Copy link

Optimization #718

closed
VJ VJ

"pass" IP-only rules should bypass detection engine after matching

Optimization #718: "pass" IP-only rules should bypass detection engine after matching

Added by Victor Julien over 13 years ago. Updated over 13 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
2.0beta1
Effort:
Difficulty:
Label:

Description

If a "pass" IP-only rule matches, it will also match for all future packets of that flow. Hence, it makes sense to set a flag in the flow to bypass the detection engine.

Actions
Copy link

Also available in: PDF Atom