Actions
Feature #7711
opentracking: detect: add detection hooks to inspect/drop before stateful components
Effort:
Difficulty:
Label:
Description
Currently the packet pipeline is roughly:
capture -> decode -> flow update -> stream -> app-layer -> detect -> output.
This leads to packets only getting dropped by a rule policy after they have first updated the state of the flow, stream, app-layer of a flow.
Updated by Victor Julien about 1 month ago
- Status changed from New to In Review
- Target version changed from TBD to 8.0.0-rc1
Updated by Philippe Antoine 21 days ago
- Status changed from In Review to Resolved
Updated by Victor Julien 21 days ago
- Status changed from Resolved to In Progress
- Target version changed from 8.0.0-rc1 to 9.0.0-beta1
Will be more to do, but that will be for 9.
Actions