Actions
Bug #864
closed
VJ
EL
Optimization #832: clean up packet action macros
backport packet action macro's
Bug #864:
backport packet action macro's
Affected Versions:
Effort:
Difficulty:
Label:
Description
Currently we have an issue where in detect-engine-alert.c we set PASS on the 'root' pkt, but check it on the tunneled (fake) packet. This leads to FP as reported on oisf-users.
Instead of fixing what we have, lets backport the packet action macro's from master, as master doesn't have this problem because it uses the TEST macro.
EL Updated by Eric Leblond almost 13 years ago
There is a PR for that: https://github.com/inliniac/suricata/pull/433
EL Updated by Eric Leblond almost 13 years ago
- % Done changed from 0 to 80
VJ Updated by Victor Julien almost 13 years ago
- Status changed from Assigned to Closed
- % Done changed from 80 to 100
Merged, thanks Eric!
Confirmed that the pass bug is gone.
Actions