]> git.ipfire.org Git - thirdparty/suricata.git/commit
projects / thirdparty / suricata.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 282423f) | patch
detect/alert: Drop packet if rule is pkt only 10963/head
authorJeff Lucovsky <jlucovsky@oisf.net>
Thu, 7 Sep 2023 14:49:23 +0000 (10:49 -0400)
committerVictor Julien <victor@inliniac.net>
Fri, 26 Apr 2024 08:33:40 +0000 (10:33 +0200)
commit6f485c46c1fa9c68664cfb93fd6c6b7b71d4b6ba
tree18d157e75b39fc4e4b0a7c56affaea1d27a5e048tree
parent282423f645a7204fb15367f914c07f4e7593b498commit | diff
detect/alert: Drop packet if rule is pkt only

This commit modifies the logic used to determine the disposition of a
flow/packet.

If the rule doesn't require a stream and only contains properties for
packet matching, then the alert is not marked as applying to the
flow and hence, the flow won't be dropped.

Issue: 5578
src/detect-engine-alert.c diff | blob | blame | history
Mirror of https://github.com/OISF/suricata.git