Project

General

Profile

Actions
Copy link

Task #9239

open
JI SB

detect/iponly: threshold by_flow with a high count never alerts (follow-up)

Task #9239: detect/iponly: threshold by_flow with a high count never alerts (follow-up)

Added by Jason Ish 15 days ago. Updated 15 days ago.

Status:
Assigned
Priority:
Normal
Assignee:
Shivani Bhardwaj
Target version:
9.0.0-beta1
Effort:
Difficulty:
low
Label:

Description

Follow-up request from PR: https://github.com/OISF/suricata/pull/16415#pullrequestreview-5467525633

Approving, but would like to see a follow up. This adds to the older style engine analysis output, but I think we care more about the json based engine analysis. There is a warnings object that can be used.

Related issues 1 (0 open — 1 closed)

Copied from Suricata - Bug #9170: detect/iponly: threshold by_flow with a high count never alertsClosedShivani BhardwajActions

JI Updated by Jason Ish 15 days ago Actions
Copy link
 #1

  • Copied from Bug #9170: detect/iponly: threshold by_flow with a high count never alerts added

JI Updated by Jason Ish 15 days ago Actions
Copy link
 #2

  • Tracker changed from Bug to Task
Actions
Copy link

Also available in: PDF Atom