Project

General

Profile

Actions

Bug #4440

closed

eve: log if flow had gap

Added by Eric Leblond over 3 years ago. Updated about 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

It is currently not possible to know if a flow had a gap. As a result it may be hard to debug a suricata setup to know which flow are badly captured and maybe should be bypassed/dropped.

Actions

Also available in: Atom PDF