doc/devguide: explain alert logging changes

8 months ago · 558ab73a7f
parent d45bdb85d5
commit 558ab73a7f
1 changed files with 12 additions and 0 deletions
--- a/doc/userguide/devguide/upgrading/index.rst
+++ b/doc/userguide/devguide/upgrading/index.rst
@ -1,6 +1,18 @@
 Upgrading
 =========

+Upgrading 8.0 to 9.0
+--------------------
+
+Alert Logging
+~~~~~~~~~~~~~
+
+Alert logging is done by iterating the `PacketAlert` entries in `Packet::alerts`. In 9.0
+it is important to check the `PacketAlert::action` field for the `ACTION_ALERT` flag. If
+this flag is not set, no alert should be generated. This is to support the `pass`-rule
+usecase better.
+
+
 Upgrading 7.0 to 8.0
 --------------------