[Oisf-users] question regarding async-oneway option

Chris Hynes chynes at grierforensics.com
Fri Feb 24 14:44:16 UTC 2017


Hello,


With async-oneway option enabled, can suricata still act as an IPS?  It seems to log simple drop/alert tests correctly, however packets still get passed through not dropped or marked according to the rules.


Thanks,

Chris

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20170224/0b83e924/attachment.html>


More information about the Oisf-users mailing list