Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
Victor Julien 8522da8ea5 stream: add option to disable raw reassembly
Raw reassembly is used only by the detection engine. For users only
caring about logging it's a significant overhead, both in cpu and
memory usage.

The option is called 'raw' and lives under the stream.reassembly
options.

stream:
  memcap: 32mb
  checksum-validation: yes      # reject wrong csums
  inline: auto                  # auto will use inline mode in IPS mode, yes or no set it statically
  reassembly:
    memcap: 64mb
    depth: 1mb                  # reassemble 1mb into a stream
    toserver-chunk-size: 2560
    toclient-chunk-size: 2560
    randomize-chunk-size: yes
    #randomize-chunk-range: 10
    raw: false # <- new option
12 years ago
benches
contrib Add one shot run option to suri-graphite. 13 years ago
doc Update docs from wiki 13 years ago
m4 Prelude plugin: add detection in configure script 16 years ago
qa prscript: add support for pcap build 12 years ago
rules dns: detect case of request flooding 12 years ago
scripts suricatasc: fix make distcheck. 13 years ago
src stream: add option to disable raw reassembly 12 years ago
.gitignore unittest: make check use a qa/log dir for logging 12 years ago
COPYING
ChangeLog Update changelog for 2.0beta1 12 years ago
LICENSE import of gplv2 LICENSE 16 years ago
Makefile.am dns: rules files was not installed 12 years ago
Makefile.cvs
acsite.m4 Added C99 defs/macros to acsite.m4 for CentOS 16 years ago
autogen.sh OpenBSD 5.2 build fixes, Unit test fix. 13 years ago
classification.config Import of classification.config 16 years ago
config.rpath Add file needed for some autotools version. 12 years ago
configure.ac util-ioctl: add GRO/LRO detection capabilities 12 years ago
doxygen.cfg Adding an updated doxygen config file, because the old one was created a couple major versions ago. 13 years ago
reference.config Add md5 to reference.config. 14 years ago
suricata.yaml.in yaml: remove no more present files 12 years ago
threshold.config threshold: improve comments of shipped threshold.config, add links to wiki. 13 years ago