Set sensible tcp timeout defaults and no longer set the timeouts from the stream engine.

src/stream-tcp.c

@@ -258,11 +258,11 @@ void StreamTcpInitConfig(char quiet)
 
     /* set the default TCP timeout, free function and flow state function
      * values. */
-    FlowSetProtoTimeout(IPPROTO_TCP, STREAMTCP_NEW_TIMEOUT,
+    //FlowSetProtoTimeout(IPPROTO_TCP, STREAMTCP_NEW_TIMEOUT,
-                        STREAMTCP_EST_TIMEOUT, STREAMTCP_CLOSED_TIMEOUT);
+    //                    STREAMTCP_EST_TIMEOUT, STREAMTCP_CLOSED_TIMEOUT);
-    FlowSetProtoEmergencyTimeout(IPPROTO_TCP, STREAMTCP_EMERG_NEW_TIMEOUT,
+    //FlowSetProtoEmergencyTimeout(IPPROTO_TCP, STREAMTCP_EMERG_NEW_TIMEOUT,
-                                 STREAMTCP_EMERG_EST_TIMEOUT,
+    //                             STREAMTCP_EMERG_EST_TIMEOUT,
-                                 STREAMTCP_EMERG_CLOSED_TIMEOUT);
+    //                             STREAMTCP_EMERG_CLOSED_TIMEOUT);
 
     FlowSetProtoFreeFunc(IPPROTO_TCP, StreamTcpSessionClear);
     FlowSetFlowStateFunc(IPPROTO_TCP, StreamTcpGetFlowState);

suricata.yaml

@@ -77,12 +77,12 @@ flow-timeouts:
       emergency_established: 100
       emergency_closed: 0
   - tcp:
-      new: 30
+      new: 60
-      established: 300
+      established: 3600
-      closed: 0
+      closed: 120
       emergency_new: 10
-      emergency_established: 100
+      emergency_established: 300
-      emergency_closed: 0
+      emergency_closed: 20
   - udp:
       new: 30
       established: 300