userguide: add details about tcp flow pass

Signed-off-by: jason taylor <jtfas90@gmail.com>

diff --git a/doc/userguide/configuration/suricata-yaml.rst b/doc/userguide/configuration/suricata-yaml.rst
index 254a7912a323feb9d0d0b0cfcfe357131b370039..28f5ff7a991eff5ab3f8ab1935eda8b74697ce1b 100644 (file)
--- a/doc/userguide/configuration/suricata-yaml.rst
+++ b/doc/userguide/configuration/suricata-yaml.rst
@@ -98,7 +98,8 @@ happen when a signature matches and contains one of those Actions:
 
 If a signature matches and contains pass, Suricata stops scanning the
 packet and skips to the end of all rules (only for the current
-packet).
+packet). If the signature matches on a TCP connection, the entire
+flow will be passed but details of the flow will still be logged.
 
 2) Drop