-
Notifications
You must be signed in to change notification settings - Fork 1.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
next/704/20250128/v1 #12499
next/704/20250128/v1 #12499
Conversation
When a signature is incorrect, its full content is logged in a message with some other information such as rules file name. As a result, the log message must be longer than a maximum signature length which is 8192. Ticket: 7419
Instead of ip-only specific flags, reuse the FLOW_PKT_TOSERVER_FIRST and FLOW_PKT_TOCLIENT_FIRST flags. Fixes false positives on one sided streams that trigger a opposing flow timeout packet at the flow's end. That pseudo packet would trigger a match even though it shouldn't. Ticket: OISF#7521.
Issue: 7467 Stream checksum validation no longer has a side effect of setting PKT_IGNORE_CHECKSUM and thus, no longer affects csum keyword checks.
Describe the change of behavior between the stream.checksum-validation setting and checksum-based rule keywords.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Staging looks OK.
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #12499 +/- ##
==========================================
- Coverage 80.58% 80.56% -0.02%
==========================================
Files 925 925
Lines 259313 259292 -21
==========================================
- Hits 208955 208906 -49
- Misses 50358 50386 +28
Flags with carried forward coverage won't be shown. Click here to find out more. |
Information: QA ran without warnings. Pipeline 24416 |
Staging:
SV_BRANCH=OISF/suricata-verify#2263