]> git.ipfire.org Git - thirdparty/suricata.git/commit
threshold: allow threshold.config to override rule
authorVictor Julien <victor@inliniac.net>
Wed, 26 Sep 2012 06:58:05 +0000 (08:58 +0200)
committerVictor Julien <victor@inliniac.net>
Wed, 26 Sep 2012 07:29:38 +0000 (09:29 +0200)
commit82fc61770bd3cdeb5cf033bfa8f7dc2580ebffbc
tree685cb3c4b40a7874be5cad3ffff5bc7f4581a744
parenta0c43a8a1c872fa1d85360f750d0235705a6911b
threshold: allow threshold.config to override rule

Allow threshold.conf to override rule thresholds in the following
cases:

- threshold.config rule uses threshold or event_filter AND
- threshold.config rule applies to a single signature (so no
  gid 0 or sid 0)

Confirmed to work with both threshold and detection_filter rule
keywords.

Part of bug #425.
src/util-threshold-config.c