Actions
Bug #864
closedOptimization #832: clean up packet action macros
backport packet action macro's
Affected Versions:
Effort:
Difficulty:
Label:
Description
Currently we have an issue where in detect-engine-alert.c we set PASS on the 'root' pkt, but check it on the tunneled (fake) packet. This leads to FP as reported on oisf-users.
Instead of fixing what we have, lets backport the packet action macro's from master, as master doesn't have this problem because it uses the TEST macro.
Updated by Eric Leblond over 11 years ago
There is a PR for that: https://github.com/inliniac/suricata/pull/433
Updated by Victor Julien over 11 years ago
- Status changed from Assigned to Closed
- % Done changed from 80 to 100
Merged, thanks Eric!
Confirmed that the pass bug is gone.
Actions