mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
c46308957f
If a Suricata inline IPS device is routing traffic over a non-encrypted tunnel, like IPv6 tunnels, packets in a flow will be dropped and not be matched. e.g. The following example is a Suricata inline IPS with an IPv6 tunnel: request: IPv4]ICMP] -> |IPS| -> IPv6]IPv4]ICMP] reply: <- |IPS| <- IPv6]IPv4]ICMP] Both the IPv4 request and IPv6 reply will be seen by Suricata on ingress. The flows will not be matched due to flow recursion level. Optionally use pkt recursion level in flow hash. Excluding recursion level in flow hash allows matching of packet flows and defrag on an inline IPS Suricata scenario where the IPS device is a tunnel terminator. Feature: 6260 |
2 years ago | |
|---|---|---|
| .. | ||
| doxygen | ||
| userguide | 2 years ago | |
| AUTHORS | 5 years ago | |
| Basic_Setup.txt | ||
| GITGUIDE | ||
| INSTALL | 3 years ago | |
| Makefile.am | 4 years ago | |
| NEWS | 5 years ago | |
| README | ||
| Setting_up_IPSinline_for_Linux.txt | 3 years ago | |
| TODO | 5 years ago | |
| Third_Party_Installation_Guides.txt | ||