]> git.ipfire.org Git - thirdparty/suricata.git/commit
eve/drop: don't log drops unless packet is dropped
authorVictor Julien <vjulien@oisf.net>
Tue, 21 Mar 2023 19:20:48 +0000 (20:20 +0100)
committerVictor Julien <vjulien@oisf.net>
Fri, 24 Mar 2023 05:28:54 +0000 (06:28 +0100)
commit09348564f032ad61811d2a77aecc1d0472f4a656
tree9bf8b8c3c9cd6380a68b33e11029e3f8a96e236e
parent9b4fb63a7be377a2c5194a58c64fc1097bb18363
eve/drop: don't log drops unless packet is dropped

In pass/drop combinations where the pass rule took precendence over
the drop, a "drop" false positive could still be logged due to the
storing of the drop record in the packet drop alert store.

Bug: #5867.
src/output-json-drop.c