Merge 46a4ff2779 into be3800132f

docs(OWNERS): add `ekoops` as approver
Signed-off-by: Leonardo Di Giovanna <41296180+ekoops@users.noreply.github.com>
2025-08-08 17:27:45 -05:00 · 2025-07-23 11:14:33 +02:00 · 2024-08-15 10:36:14 +01:00
2 changed files with 2 additions and 1 deletions
--- a/1
+++ b/1
@ -5,6 +5,7 @@ approvers:
  - fededp
  - andreagit97
  - lucaguerra
+  - ekoops
 reviewers:
  - leodido
  - kaizhe
--- a/rules/falco-incubating_rules.yaml
+++ b/rules/falco-incubating_rules.yaml
@ -727,7 +727,7 @@
  items: [0, 9, 80, 3306]

 - list: expected_udp_ports
-  items: [53, openvpn_udp_ports, l2tp_udp_ports, statsd_ports, ntp_ports, test_connect_ports]
+  items: [53, 443, 88, openvpn_udp_ports, l2tp_udp_ports, statsd_ports, ntp_ports, test_connect_ports]

 - macro: expected_udp_traffic
  condition: fd.port in (expected_udp_ports)
Author	SHA1	Message	Date
jackmtpt	22e08f334b	Merge `46a4ff2779` into `be3800132f`	2025-08-08 17:27:45 -05:00
Leonardo Di Giovanna	be3800132f	docs(OWNERS): add `ekoops` as approver Signed-off-by: Leonardo Di Giovanna <41296180+ekoops@users.noreply.github.com>	2025-07-23 11:14:33 +02:00
jackmtpt	46a4ff2779	Ignore common UDP ports 443 (http3) and 88 (kerberos) are expected to see UDP traffic Signed-off-by: jackmtpt <115712715+jackmtpt@users.noreply.github.com>	2024-08-15 10:36:14 +01:00