Project

General

Profile

Actions
Copy link

Feature #8117

closed
PA SB

Task #5645: tracking: elephant flow detection

rules: flow.elephant keyword

Feature #8117: rules: flow.elephant keyword

Added by Philippe Antoine 11 months ago. Updated 8 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Shivani Bhardwaj
Target version:
9.0.0-beta1
Effort:
low
Difficulty:
low
Label:
Needs backport to 8.0

Description

Matching the log field added by #5647

Related issues 2 (2 open — 0 closed)

Related to Suricata - Task #8123: Suricon 2025 BrainstormAssignedVictor JulienActions
Related to Suricata - Feature #9179: rules: flow.elephant keyword (8.0.x backport)In ReviewJason IshActions

SB Updated by Shivani Bhardwaj 11 months ago Actions
Copy link
 #1

  • Assignee changed from OISF Dev to Shivani Bhardwaj

JF Updated by Juliana Fajardini Reichow 11 months ago Actions
Copy link
 #2

  • Related to Task #8123: Suricon 2025 Brainstorm added

JF Updated by Juliana Fajardini Reichow 11 months ago Actions
Copy link
 #3

Mentioned during Q&A at SuriCon 2025.

VJ Updated by Victor Julien 11 months ago Actions
Copy link
 #4

  • Subject changed from detection: flow.elephant keyword to rules: flow.elephant keyword
  • Status changed from New to Assigned

Not sure if this should be it's own keyword or that it should be part of the flow keyword since it's a flow flag.

SB Updated by Shivani Bhardwaj 11 months ago Actions
Copy link
 #5

  • Tracker changed from Task to Feature
  • Effort set to low
  • Difficulty set to low

SB Updated by Shivani Bhardwaj 11 months ago Actions
Copy link
 #6

  • Status changed from Assigned to In Review

SB Updated by Shivani Bhardwaj 10 months ago Actions
Copy link
 #7

  • Status changed from In Review to Closed

JI Updated by Jason Ish 8 days ago Actions
Copy link
 #8

  • Label Needs backport to 8.0 added

Evaluate for a backport.

JI Updated by Jason Ish 8 days ago Actions
Copy link
 #9

  • Related to Feature #9179: rules: flow.elephant keyword (8.0.x backport) added
Actions
Copy link

Also available in: PDF Atom