Project

General

Profile

Actions
Copy link

Task #7456

closed

engine/analysis: report rule state altered by flowbit rule

Added by Juliana Fajardini Reichow 2 months ago. Updated 3 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Juliana Fajardini Reichow
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

Flowbits can make a packet (stateless) rule become stateful (requiring flow) without
even changing the rule type.

Have the engine analyzer report when this happens, to increase visibility.

Related issues 4 (4 open — 0 closed)

Related to Suricata - Documentation #7031: userguide: document SignatureProperties sigtypeResolvedJuliana Fajardini ReichowActions
Related to Suricata - Documentation #7395: engine/analysis: document the output for user friendlinessNewOISF DevActions
Related to Suricata - Task #7484: engine/analysis: report rule dependenciesNewOISF DevActions
Related to Suricata - Task #7510: tests: add tests for each example and corner casesNewOISF DevActions
Actions
Copy link
 #1

Updated by Juliana Fajardini Reichow 2 months ago

Actions
Copy link
 #2

Updated by Juliana Fajardini Reichow 2 months ago

  • Related to Documentation #7395: engine/analysis: document the output for user friendliness added
Actions
Copy link
 #3

Updated by Juliana Fajardini Reichow 2 months ago

  • Status changed from New to In Progress
Actions
Copy link
 #4

Updated by Juliana Fajardini Reichow 2 months ago

  • Status changed from In Progress to In Review
Actions
Copy link
 #5

Updated by Juliana Fajardini Reichow about 1 month ago

  • Related to Task #7484: engine/analysis: report rule dependencies added
Actions
Copy link
 #6

Updated by Juliana Fajardini Reichow about 1 month ago

  • Subject changed from analysis: report rule state altered by other rule to engine/analysis: report rule state altered by flowbit rule
Actions
Copy link
 #7

Updated by Juliana Fajardini Reichow about 1 month ago

  • Related to Task #7510: tests: add tests for each example and corner cases added
Actions
Copy link
 #8

Updated by Juliana Fajardini Reichow 3 days ago

  • Status changed from In Review to Closed
  • Target version changed from TBD to 8.0.0-beta1
Actions
Copy link

Also available in: Atom PDF