Project

General

Profile

Actions
Copy link

Task #7456

open

engine/analysis: report rule state altered by flowbit rule

Added by Juliana Fajardini Reichow about 1 month ago. Updated 8 days ago.

Status:
In Review
Priority:
Normal
Assignee:
Juliana Fajardini Reichow
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Flowbits can make a packet (stateless) rule become stateful (requiring flow) without
even changing the rule type.

Have the engine analyzer report when this happens, to increase visibility.

Related issues 4 (4 open — 0 closed)

Related to Suricata - Documentation #7031: userguide: document SignatureProperties sigtypeIn ReviewJuliana Fajardini ReichowActions
Related to Suricata - Documentation #7395: engine/analysis: document the output for user friendlinessNewOISF DevActions
Related to Suricata - Task #7484: engine/analysis: report rule dependenciesNewOISF DevActions
Related to Suricata - Task #7510: tests: add tests for each example and corner casesNewOISF DevActions
Actions
Copy link
 #1

Updated by Juliana Fajardini Reichow about 1 month ago

Actions
Copy link
 #2

Updated by Juliana Fajardini Reichow about 1 month ago

  • Related to Documentation #7395: engine/analysis: document the output for user friendliness added
Actions
Copy link
 #3

Updated by Juliana Fajardini Reichow about 1 month ago

  • Status changed from New to In Progress
Actions
Copy link
 #4

Updated by Juliana Fajardini Reichow about 1 month ago

  • Status changed from In Progress to In Review
Actions
Copy link
 #5

Updated by Juliana Fajardini Reichow 8 days ago

  • Related to Task #7484: engine/analysis: report rule dependencies added
Actions
Copy link
 #6

Updated by Juliana Fajardini Reichow 8 days ago

  • Subject changed from analysis: report rule state altered by other rule to engine/analysis: report rule state altered by flowbit rule
Actions
Copy link
 #7

Updated by Juliana Fajardini Reichow about 15 hours ago

  • Related to Task #7510: tests: add tests for each example and corner cases added
Actions
Copy link

Also available in: Atom PDF