]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
userguide: add details about tcp flow pass
authorjason taylor <jtfas90@gmail.com>
Thu, 15 Jun 2023 18:17:24 +0000 (18:17 +0000)
committerVictor Julien <vjulien@oisf.net>
Thu, 13 Jul 2023 05:05:01 +0000 (07:05 +0200)
Signed-off-by: jason taylor <jtfas90@gmail.com>
doc/userguide/configuration/suricata-yaml.rst

index bde02112b1794e95a36c23118d65387860879382..d5dabe2e4dd7eb7cfd0d2d44f7fc810ccc9ce1f6 100644 (file)
@@ -98,7 +98,8 @@ happen when a signature matches and contains one of those Actions:
 
 If a signature matches and contains pass, Suricata stops scanning the
 packet and skips to the end of all rules (only for the current
-packet).
+packet). If the signature matches on a TCP connection, the entire
+flow will be passed but details of the flow will still be logged.
 
 2) Drop