Project

General

Profile

Actions

Feature #8436

open
VJ

rules: allow rule to modify midstream behavior per flow

Feature #8436: rules: allow rule to modify midstream behavior per flow

Added by Victor Julien 1 day ago.

Status:
New
Priority:
Normal
Assignee:
-
Target version:
Effort:
Difficulty:
Label:

Description

A config rule in the pre_stream hook could selectively allow midstream pickups, e.g. from a known server with long sessions.

E.g. something like:

config tcp:pre_stream any any <> 10.10.10.10 445 (config:midstream enable, type stream, scope flow;) 


Related issues 1 (1 open0 closed)

Related to Suricata - Feature #5495: implement grace period for midstream exception policyNewOISF DevActions

VJ Updated by Victor Julien 1 day ago Actions #1

  • Related to Feature #5495: implement grace period for midstream exception policy added
Actions

Also available in: PDF Atom