Actions
Support #3037
closedThe rules detect order
Status:
Closed
Priority:
Normal
Assignee:
-
Affected Versions:
Label:
Description
suricata detect the signatures with ip at first;then tcp or udp;the last is alproto?
and if the rules have same proto,the order is pass,drop,reject,alert?
and if the rules have same action,the order is the sid number?
Actions