Project

General

Profile

Actions
Copy link

Feature #8436

open
VJ OD

rules: allow rule to modify midstream behavior per flow

Feature #8436: rules: allow rule to modify midstream behavior per flow

Added by Victor Julien 5 months ago. Updated 16 days ago.

Status:
Triaged
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

A config rule in the pre_stream hook could selectively allow midstream pickups, e.g. from a known server with long sessions.

E.g. something like:

config tcp:pre_stream any any <> 10.10.10.10 445 (config:midstream enable, type stream, scope flow;)

Related issues 1 (1 open — 0 closed)

Related to Suricata - Feature #5495: implement grace period for midstream exception policyNewOISF DevActions

VJ Updated by Victor Julien 5 months ago Actions
Copy link
 #1

  • Related to Feature #5495: implement grace period for midstream exception policy added

PA Updated by Philippe Antoine 16 days ago Actions
Copy link
 #2

  • Status changed from New to Triaged
  • Assignee set to OISF Dev
Actions
Copy link

Also available in: PDF Atom