On 19/01/20 at 17:36, Star wrote: > What does the signature_severity Major in the suricata default rule > mean? That is just a classification of the severity by the rule writer. This is on a lot of rules so depends mainly on the context. -- Andreas Herz