Actions
Feature #4408
opendefinitive log count mode for qa purposes
Description
Often enough it happens that the count of alert and other logs may have slight variations when reading large/big pcaps.
This could be due to many reasons like flow timeouts/randomization of windows etc.
It would be nice to have some sort of a definitive count QA run mode to compare diff QA/branches runs and be able to easier spot regressions.
Updated by Philippe Antoine 4 months ago
- Assignee set to OISF Dev
- Target version set to TBD
Actions