From 91f57200c7c4d5f32961aa497ed436163a8f8e41 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Thu, 28 Apr 2016 11:48:30 +0200 Subject: [PATCH] stream: add stream.reassembly.check-overlap-different-data option --- suricata.yaml.in | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/suricata.yaml.in b/suricata.yaml.in index 4f2dd63220..1009c94ac9 100644 --- a/suricata.yaml.in +++ b/suricata.yaml.in @@ -1208,6 +1208,13 @@ flow-timeouts: # - size: 4 # Size of the (data)segment for a pool # prealloc: 256 # Number of segments to prealloc and keep # # in the pool. +# check-overlap-different-data: true|false +# # check if a segment contains different data +# # than what we've already seen for that +# # position in the stream. +# # This is enabled automatically if inline mode +# # is used or when stream-event:reassembly_overlap_different_data; +# # is used in a rule. # stream: memcap: 64mb @@ -1241,6 +1248,7 @@ stream: # prealloc: 1024 # - size: 65535 # prealloc: 128 + #check-overlap-different-data: true # Host table: #