suricata icon indicating copy to clipboard operation
suricata copied to clipboard

WIP detect: add option to reenable flow actions

Open victorjulien opened this issue 1 year ago • 3 comments

Add an option to allow rules like pass tls ... to be considered app-layer instead of pkt. This will turn the actions into flow actions.

Ticket: #7284.

SV_BRANCH=https://github.com/OISF/suricata-verify/pull/2066

victorjulien avatar Sep 26 '24 19:09 victorjulien

Codecov Report

:white_check_mark: All modified and coverable lines are covered by tests. :white_check_mark: Project coverage is 82.56%. Comparing base (45eb7e4) to head (3755057). :warning: Report is 1808 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main   #11840      +/-   ##
==========================================
- Coverage   82.60%   82.56%   -0.04%     
==========================================
  Files         912      912              
  Lines      249351   249359       +8     
==========================================
- Hits       205965   205882      -83     
- Misses      43386    43477      +91     
Flag Coverage Δ
fuzzcorpus 60.42% <87.50%> (-0.18%) :arrow_down:
livemode 18.73% <87.50%> (+<0.01%) :arrow_up:
pcap 44.14% <87.50%> (+0.08%) :arrow_up:
suricata-verify 62.03% <100.00%> (-0.01%) :arrow_down:
unittests 58.94% <87.50%> (+<0.01%) :arrow_up:

Flags with carried forward coverage won't be shown. Click here to find out more.

:rocket: New features to boost your workflow:
  • :snowflake: Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

codecov[bot] avatar Sep 26 '24 20:09 codecov[bot]

Information: QA ran without warnings.

Pipeline 22887

suricata-qa avatar Sep 27 '24 02:09 suricata-qa

What is the status od this PR getting old ?

catenacyber avatar Jan 28 '25 15:01 catenacyber