userguide: add details about tcp flow pass

Signed-off-by: jason taylor <jtfas90@gmail.com>
2 years ago · 19a0b2b0d2
parent ce055111fe
commit 19a0b2b0d2
1 changed files with 2 additions and 1 deletions
--- a/doc/userguide/configuration/suricata-yaml.rst
+++ b/doc/userguide/configuration/suricata-yaml.rst
@ -98,7 +98,8 @@ happen when a signature matches and contains one of those Actions:

 If a signature matches and contains pass, Suricata stops scanning the
 packet and skips to the end of all rules (only for the current
-packet).
+packet). If the signature matches on a TCP connection, the entire
+flow will be passed but details of the flow will still be logged.

 2) Drop