Project

General

Profile

Actions
Copy link

Task #7456

closed
JF JF

engine/analysis: report rule state altered by flowbit rule

Task #7456: engine/analysis: report rule state altered by flowbit rule

Added by Juliana Fajardini Reichow over 1 year ago. Updated about 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Juliana Fajardini Reichow
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

Flowbits can make a packet (stateless) rule become stateful (requiring flow) without
even changing the rule type.

Have the engine analyzer report when this happens, to increase visibility.

Related issues 4 (3 open — 1 closed)

Related to Suricata - Documentation #7031: userguide: document SignatureProperties sigtypeClosedJuliana Fajardini ReichowActions
Related to Suricata - Documentation #7395: engine/analysis: document the output for user friendlinessNewOISF DevActions
Related to Suricata - Task #7484: engine/analysis: report rule dependenciesNewOISF DevActions
Related to Suricata - Task #7510: tests: add tests for each example and corner casesNewOISF DevActions

JF Updated by Juliana Fajardini Reichow over 1 year ago Actions
Copy link
 #1

JF Updated by Juliana Fajardini Reichow over 1 year ago Actions
Copy link
 #2

  • Related to Documentation #7395: engine/analysis: document the output for user friendliness added

JF Updated by Juliana Fajardini Reichow over 1 year ago Actions
Copy link
 #3

  • Status changed from New to In Progress

JF Updated by Juliana Fajardini Reichow over 1 year ago Actions
Copy link
 #4

  • Status changed from In Progress to In Review

JF Updated by Juliana Fajardini Reichow about 1 year ago Actions
Copy link
 #5

  • Related to Task #7484: engine/analysis: report rule dependencies added

JF Updated by Juliana Fajardini Reichow about 1 year ago Actions
Copy link
 #6

  • Subject changed from analysis: report rule state altered by other rule to engine/analysis: report rule state altered by flowbit rule

JF Updated by Juliana Fajardini Reichow about 1 year ago Actions
Copy link
 #7

  • Related to Task #7510: tests: add tests for each example and corner cases added

JF Updated by Juliana Fajardini Reichow about 1 year ago Actions
Copy link
 #8

  • Status changed from In Review to Closed
  • Target version changed from TBD to 8.0.0-beta1
Actions
Copy link

Also available in: PDF Atom