From 19a0b2b0d2dfcab0ba201df4e7e9a08abff2506b Mon Sep 17 00:00:00 2001 From: jason taylor Date: Thu, 15 Jun 2023 18:17:24 +0000 Subject: [PATCH] userguide: add details about tcp flow pass Signed-off-by: jason taylor --- doc/userguide/configuration/suricata-yaml.rst | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/doc/userguide/configuration/suricata-yaml.rst b/doc/userguide/configuration/suricata-yaml.rst index bde02112b1..d5dabe2e4d 100644 --- a/doc/userguide/configuration/suricata-yaml.rst +++ b/doc/userguide/configuration/suricata-yaml.rst @@ -98,7 +98,8 @@ happen when a signature matches and contains one of those Actions: If a signature matches and contains pass, Suricata stops scanning the packet and skips to the end of all rules (only for the current -packet). +packet). If the signature matches on a TCP connection, the entire +flow will be passed but details of the flow will still be logged. 2) Drop -- 2.47.3