Project

General

Profile

Actions
Copy link

Bug #4672

closed

PR 6336 QA alert deviation

Added by Corey Thomas over 3 years ago. Updated about 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
QA
Affected Versions:
git master
Effort:
medium
Difficulty:
medium
Label:
C

Description

Git master had a low alert deviation that happened between QA rebases.

Running against our SURI_TLPR1 test and reverting commits traces back to PR 6336 and commit https://github.com/OISF/suricata/pull/6336/commits/9b9f909d7db9ba4485bf50577868fa7072998487

Unfortunately the smallest reproducible test so far is TLPR1, which is our largest test and takes over 20minutes to run.

Smaller pcaps with single alerts do not seem to show any loss at small scale.

Running with "toserver" has alert deviation. https://github.com/ct0br0/suricata/commit/546b7b15d70a9bd0ed8f7356250f5eee5fd0c17e

Commenting out "toclient" lines of the commit do not seem to have any alert drops.

Actions
Copy link

Also available in: Atom PDF