Project

General

Profile

Actions
Copy link

Bug #7906

closed

Bug #7630: eve/alert: incorrect verdict with pass + alert rule

eve/alert: incorrect verdict with pass + alert rule (7.0.x backport)

Added by OISF Ticketbot about 2 months ago. Updated 4 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Juliana Fajardini Reichow
Target version:
7.0.13
Affected Versions:
Effort:
Difficulty:
Label:

Related issues 1 (0 open — 1 closed)

Has duplicate Suricata - Bug #7907: eve/alert: verdict reports "alert" when traffic is allowed implicitly/passively (7.0.x backport)ClosedJuliana Fajardini ReichowActions
Actions
Copy link
 #1

Updated by Shivani Bhardwaj 11 days ago

  • Subject changed from pass rules with alert; keyword log with a verdict of "alert" instead of "pass" (7.0.x backport) to output/alert: incorrect verdict with pass + alert rule (7.0.x backport)
Actions
Copy link
 #2

Updated by Shivani Bhardwaj 11 days ago

  • Has duplicate Bug #7907: eve/alert: verdict reports "alert" when traffic is allowed implicitly/passively (7.0.x backport) added
Actions
Copy link
 #3

Updated by Victor Julien 10 days ago

  • Subject changed from output/alert: incorrect verdict with pass + alert rule (7.0.x backport) to eve/alert: incorrect verdict with pass + alert rule (7.0.x backport)
Actions
Copy link
 #4

Updated by Victor Julien 5 days ago

  • Status changed from Assigned to Resolved
Actions
Copy link
 #5

Updated by Victor Julien 4 days ago

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: Atom PDF