nfq:
mode: repeat
- repeat-mark: 2
- repeat-mask: 2
+ repeat-mark: 16
+ repeat-mask: 16
# bypass-mark: 1
# bypass-mask: 1
# route-queue: 2
tls:
enabled: yes
detection-ports:
- dp: "[443,465,993,995]"
+ dp: "[443,444,465,993,995]"
# Completely stop processing TLS/SSL session after the handshake
# completed. If bypass is enabled this will also trigger flow