mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
65f6d24e34
Issue: 7814
Support unique flow variable names for entropy-related values.
Since this is a breaking change from Suricata 8, unique names
are configurable (default value off) with this setting
logging:
entropy:
make-unique: on
When `make-unique` is on, entropy-related flow variable names are
structured as:
sid:<sid>;buffer:<buffer>;instance:<instance>
Instance is a small integer value corresponding to the number of
entropy values in the rule. The first entropy usage will create a flow
variable with an instance value of 1; the second will use 2, and so
on. This is necessary to disambiguate the flow variable names.
When `make-unique` is off (default = off), this format is used:
<sticky_buffer>
|
12 months ago | |
|---|---|---|
| .. | ||
| Makefile.am | 2 years ago | |
| classification.config | ||
| reference.config | 2 years ago | |
| schema.json | 12 months ago | |
| suricata.logrotate.in | ||
| suricata.service.in | ||