Actions
Bug #7197
opendetect/flowvars: persist if the inspection happens on multiple packets
Affected Versions:
Effort:
high
Difficulty:
Label:
Description
At the end of the run of each detection (frame, transaction..) the flowvar varlist in the DetectEngineThreadCtx gets reset by DetectVarProcessList
This prevents the flow variable to persist if the rule inspection happens on multiple packets ( as stored in a DetectEngineState )
SV test coming when I will get the ticket number
Actions