You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/etc
Philippe Antoine f2c3776314 detect: log app-layer metadata in alert with single tx
Ticket: 7199

Uses a config parameter detect.guess-applayer-tx to enable
this behavior (off by default)

This feature is requested for use cases with signatures not
using app-layer keywords but still targetting application
layer transactions, such as pass/drop rule combination,
or lua usage.

This overrides the previous behavior of checking if the signature
has a content match, by checking if there is only one live
transaction, in addition to the config parameter being set.
2 years ago
..
Makefile.am doc/userguide: generate eve documentation 2 years ago
classification.config classification: sync and update 6 years ago
reference.config config: Update reference keys 2 years ago
schema.json detect: log app-layer metadata in alert with single tx 2 years ago
suricata.logrotate.in logrotate: reindent to 4 spaces 6 years ago
suricata.service.in Sample systemd unit file for Suricata. 9 years ago