[Oisf-users] Suricata 4.1.5 - unable to complete certain TLS connections

Victor Julien lists at inliniac.net
Mon Oct 21 09:41:04 UTC 2019


On 21-10-19 00:18, Nuno Oliveira wrote:
>         #- drop:
>         #    alerts: yes      # log alerts that caused drops
>         #    flows: all       # start or all: 'start' logs only a single drop
>         #                     # per flow direction. All logs each dropped pkt.

I would suggest enabling this in your eve log, so you can see which rule
triggered the drop.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------



More information about the Oisf-users mailing list