Skip to main content

Timeline for Suricata not matching a packet

Current License: CC BY-SA 4.0

4 events
when toggle format what by license comment
Oct 7, 2019 at 18:33 comment added dcol That answers it. That's what I meant by 'ignored'. Thanks.
Oct 7, 2019 at 18:03 comment added Steffen Ullrich @dcol: I'm not sure what you mean with "ignored". If there is no rule matching the packet then no rule defined action will be taken, which means that the packet gets passed through when Suricata is inline.
Oct 7, 2019 at 17:38 comment added dcol So is the packet ignored if there is no matching rule? That way I would only need specific drop rules and bypass rules to improve performance
Oct 7, 2019 at 16:13 history answered Steffen Ullrich CC BY-SA 4.0