|
|
|
|
@ -405,7 +405,9 @@ outputs:
|
|
|
|
|
# sha1 and sha256
|
|
|
|
|
#force-hash: [md5]
|
|
|
|
|
force-filestore: no # force storing of all files
|
|
|
|
|
stream-depth: 1mb # reassemble 1mb into a stream, set to no to disable
|
|
|
|
|
# override global stream-depth for sessions in which we want to
|
|
|
|
|
# perform file extraction. Set to 0 for unlimited.
|
|
|
|
|
#stream-depth: 0
|
|
|
|
|
#waldo: file.waldo # waldo file to store the file_id across runs
|
|
|
|
|
|
|
|
|
|
# output module to log files tracked in a easily parsable json format
|
|
|
|
|
@ -701,7 +703,7 @@ app-layer:
|
|
|
|
|
# If the limit is reached, app-layer-event:modbus.flooded; will match.
|
|
|
|
|
#request-flood: 500
|
|
|
|
|
|
|
|
|
|
# Stream reassembly size for modbus, default is 0
|
|
|
|
|
# Stream reassembly size for modbus. By default track it completely.
|
|
|
|
|
stream-depth: 0
|
|
|
|
|
|
|
|
|
|
enabled: no
|
|
|
|
|
|