Skip to content

ssh: do not enforce pcap_cnt#1640

Closed
catenacyber wants to merge 1 commit intoOISF:masterfrom
catenacyber:tcp-skip-not-established-v2
Closed

ssh: do not enforce pcap_cnt#1640
catenacyber wants to merge 1 commit intoOISF:masterfrom
catenacyber:tcp-skip-not-established-v2

Conversation

@catenacyber
Copy link
Collaborator

@catenacyber catenacyber commented Feb 11, 2024

Ticket

Redmine ticket: https://redmine.openinfosecfoundation.org/issues/6775

Prerequisite for OISF/suricata#10307 and next

#1631 with enforcing to not match at pcap_cnt 7 as asked by Jason

@catenacyber catenacyber added tests pass These new tests should pass prerequisite prerequisite before Suricata PR requires suricata pr Depends on a PR in Suricata and removed tests pass These new tests should pass labels Feb 11, 2024
@catenacyber
Copy link
Collaborator Author

Should I have split the PR in 2 commits ?
One prerequisite and one requiring the PR ?

As this is an invalid tcp packet, that should not run any tx
detection on it.
@catenacyber
Copy link
Collaborator Author

Replaced by #1644

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

prerequisite prerequisite before Suricata PR requires suricata pr Depends on a PR in Suricata

Development

Successfully merging this pull request may close these issues.

1 participant