userguide: add details about tcp flow pass

Signed-off-by: jason taylor <[email protected]>
jmtaylor90 · Jul 3, 2023 · 2722ec0 · 2722ec0
1 parent a3168fd
commit 2722ec0
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/doc/userguide/configuration/suricata-yaml.rst b/doc/userguide/configuration/suricata-yaml.rst
@@ -98,7 +98,8 @@ happen when a signature matches and contains one of those Actions:
 
 If a signature matches and contains pass, Suricata stops scanning the
 packet and skips to the end of all rules (only for the current
-packet).
+packet). If the signature matches on a TCP connection, the entire
+flow will be passed but details of the flow will still be logged.
 
 2) Drop