Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
cdwakelin 2e9279dd42 autofp: add "ippair" scheduler
Add "ippair" autofp scheduler to split traffic based on source and
destination IP only (not ports).

- This is useful when using the "xbits" feature to track events
  that occur between the same hosts but not necessarily the same
  flow (such as exploit kit landings/expoits/payloads)
- The disadvantage is that traffic may be balanced very unevenly
  between threads if some host pairs are much more frequently seen
  than others, so it may be only practicable for sandbox or pcap
  analysis
- not tested for IPv6

See https://redmine.openinfosecfoundation.org/issues/1661
9 years ago
benches
contrib
doc
lua
m4
qa
rules rules: add rules for TLS SNI app layer events 9 years ago
scripts
src autofp: add "ippair" scheduler 9 years ago
.gitignore
.travis.yml travis: set CFLAGS to error on cc warnings 9 years ago
COPYING
ChangeLog changelog: update for 3.0.1RC1 9 years ago
LICENSE
Makefile.am build: install app-layer-events.rules 9 years ago
Makefile.cvs
acsite.m4
autogen.sh
classification.config
config.rpath
configure.ac configure: bypass libpcre 8.35 check 9 years ago
doxygen.cfg
reference.config
suricata.yaml.in smtp: fix config parsing and config defaults 9 years ago
threshold.config