Project

General

Profile

Actions

Task #7456

closed

engine/analysis: report rule state altered by flowbit rule

Added by Juliana Fajardini Reichow 4 months ago. Updated about 1 month ago.

Status:
Closed
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

Flowbits can make a packet (stateless) rule become stateful (requiring flow) without
even changing the rule type.

Have the engine analyzer report when this happens, to increase visibility.


Related issues 4 (4 open0 closed)

Related to Suricata - Documentation #7031: userguide: document SignatureProperties sigtypeResolvedJuliana Fajardini ReichowActions
Related to Suricata - Documentation #7395: engine/analysis: document the output for user friendlinessNewOISF DevActions
Related to Suricata - Task #7484: engine/analysis: report rule dependenciesNewOISF DevActions
Related to Suricata - Task #7510: tests: add tests for each example and corner casesNewOISF DevActions
Actions

Also available in: Atom PDF