]> git.ipfire.org Git - thirdparty/suricata-update.git/commitdiff
logging: Improve flowbit logs
authorRiju <19.riju@gmail.com>
Fri, 16 Oct 2020 20:37:13 +0000 (02:07 +0530)
committerJason Ish <jason.ish@oisf.net>
Fri, 7 Jan 2022 17:58:17 +0000 (11:58 -0600)
Add and update debug logs for flowbit requirements to display pass

Ticket #3205.

suricata/update/main.py

index 22b9da14383e370a0d178ba0b422b950d09b65bc..4a1c569eb89f7b4a825fc30c3d17e167f105f252 100644 (file)
@@ -627,13 +627,15 @@ def dump_sample_configs():
 def resolve_flowbits(rulemap, disabled_rules):
     flowbit_resolver = rule_mod.FlowbitResolver()
     flowbit_enabled = set()
+    pass_ = 1
     while True:
+        logger.debug("Checking flowbits for pass %d of rules.", pass_)
         flowbits = flowbit_resolver.get_required_flowbits(rulemap)
         logger.debug("Found %d required flowbits.", len(flowbits))
         required_rules = flowbit_resolver.get_required_rules(rulemap, flowbits)
         logger.debug(
-            "Found %d rules to enable to for flowbit requirements",
-            len(required_rules))
+            "Found %d rules to enable for flowbit requirements (pass %d)",
+            len(required_rules), pass_)
         if not required_rules:
             logger.debug("All required rules enabled.")
             break
@@ -645,6 +647,7 @@ def resolve_flowbits(rulemap, disabled_rules):
             rule.enabled = True
             rule.noalert = True
             flowbit_enabled.add(rule)
+        pass_ = pass_ + 1
     logger.info("Enabled %d rules for flowbit dependencies." % (
         len(flowbit_enabled)))