Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
Victor Julien ebb42f831c suppress: add track by_either mode
So far suppress rules would apply to src or dst addresses of a packet.
This meant that if a ip would need to suppressed both as src and as dst,
2 suppress rules would be needed.

This patch introduces track by_either, which means that the ip(s) in the
suppress rule are tested against both the packets source and dest ip's.
If either of them is on the suppress list, the alert is suppressed.
11 years ago
benches
contrib suri-graphite: add ouput to file option 11 years ago
doc Fix make distcheck on CentOS 5.11 11 years ago
lua output-lua: add SCPacketTimeString 11 years ago
m4
qa parsing: s/strtok/strtok_r/g 11 years ago
rules decode: add ERSPANv1 decoder 11 years ago
scripts suricatasc: allow for longer response times after connect 11 years ago
src suppress: add track by_either mode 11 years ago
.gitignore
.travis.yml travis-ci: use make check 11 years ago
COPYING
ChangeLog Update changelog for 2.1beta4 release 11 years ago
LICENSE
Makefile.am Respect DESTDIR in install-conf and install-rules. 11 years ago
Makefile.cvs
acsite.m4
autogen.sh
classification.config
config.rpath
configure.ac Feature #1440: support wildcards in rule filenames 11 years ago
doxygen.cfg doxygen: add source browser 12 years ago
reference.config Update reference.config 11 years ago
suricata.yaml.in Add Feature #1454. Generic eve-log prefix support. 11 years ago
threshold.config