]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect: safety for app-layer logging of stream-only rules
authorPhilippe Antoine <pantoine@oisf.net>
Fri, 31 May 2024 12:06:55 +0000 (14:06 +0200)
committerVictor Julien <victor@inliniac.net>
Fri, 20 Sep 2024 09:49:14 +0000 (11:49 +0200)
commitde9413c654f6c3059fa21ba3df0f649435515543
treec750e77e1b35c93c7bfdd14842466c22c2a711eb
parentf46a8776ecc3f73c58d129b964f48d90727580a0
detect: safety for app-layer logging of stream-only rules

If a stream-only rule matches, and we find a tx where we
want to log the app-layer data, store into the tx data that
we already logged, so that we do not log again the app-layer metadata

Ticket: 7085
doc/userguide/configuration/suricata-yaml.rst
rust/src/applayer.rs
src/detect-engine.c
src/detect.c
src/detect.h
suricata.yaml.in