From: jason taylor Date: Thu, 15 Jun 2023 18:17:24 +0000 (+0000) Subject: userguide: add details about tcp flow pass X-Git-Tag: suricata-6.0.14~19 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0e6e5f562d39626cd59a0b4259c85e0bb1019b51;p=thirdparty%2Fsuricata.git userguide: add details about tcp flow pass Signed-off-by: jason taylor --- diff --git a/doc/userguide/configuration/suricata-yaml.rst b/doc/userguide/configuration/suricata-yaml.rst index 254a7912a3..28f5ff7a99 100644 --- a/doc/userguide/configuration/suricata-yaml.rst +++ b/doc/userguide/configuration/suricata-yaml.rst @@ -98,7 +98,8 @@ happen when a signature matches and contains one of those Actions: If a signature matches and contains pass, Suricata stops scanning the packet and skips to the end of all rules (only for the current -packet). +packet). If the signature matches on a TCP connection, the entire +flow will be passed but details of the flow will still be logged. 2) Drop