Actions
Feature #7711
opentracking: detect: add detection hooks to inspect/drop before stateful components
Effort:
Difficulty:
Label:
Description
Currently the packet pipeline is roughly:
capture -> decode -> flow update -> stream -> app-layer -> detect -> output.
This leads to packets only getting dropped by a rule policy after they have first updated the state of the flow, stream, app-layer of a flow.
Actions