From 0e6e5f562d39626cd59a0b4259c85e0bb1019b51 Mon Sep 17 00:00:00 2001 From: jason taylor Date: Thu, 15 Jun 2023 18:17:24 +0000 Subject: [PATCH] userguide: add details about tcp flow pass Signed-off-by: jason taylor --- doc/userguide/configuration/suricata-yaml.rst | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/doc/userguide/configuration/suricata-yaml.rst b/doc/userguide/configuration/suricata-yaml.rst index 254a7912a3..28f5ff7a99 100644 --- a/doc/userguide/configuration/suricata-yaml.rst +++ b/doc/userguide/configuration/suricata-yaml.rst @@ -98,7 +98,8 @@ happen when a signature matches and contains one of those Actions: If a signature matches and contains pass, Suricata stops scanning the packet and skips to the end of all rules (only for the current -packet). +packet). If the signature matches on a TCP connection, the entire +flow will be passed but details of the flow will still be logged. 2) Drop -- 2.47.2