Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
Victor Julien 8522da8ea5 stream: add option to disable raw reassembly
Raw reassembly is used only by the detection engine. For users only
caring about logging it's a significant overhead, both in cpu and
memory usage.

The option is called 'raw' and lives under the stream.reassembly
options.

stream:
  memcap: 32mb
  checksum-validation: yes      # reject wrong csums
  inline: auto                  # auto will use inline mode in IPS mode, yes or no set it statically
  reassembly:
    memcap: 64mb
    depth: 1mb                  # reassemble 1mb into a stream
    toserver-chunk-size: 2560
    toclient-chunk-size: 2560
    randomize-chunk-size: yes
    #randomize-chunk-range: 10
    raw: false # <- new option
13 years ago
benches
…
contrib Add one shot run option to suri-graphite. 14 years ago
doc Update docs from wiki 14 years ago
m4 Prelude plugin: add detection in configure script 17 years ago
qa prscript: add support for pcap build 13 years ago
rules dns: detect case of request flooding 13 years ago
scripts suricatasc: fix make distcheck. 14 years ago
src stream: add option to disable raw reassembly 13 years ago
.gitignore unittest: make check use a qa/log dir for logging 13 years ago
COPYING
…
ChangeLog Update changelog for 2.0beta1 13 years ago
LICENSE import of gplv2 LICENSE 17 years ago
Makefile.am dns: rules files was not installed 13 years ago
Makefile.cvs
…
acsite.m4
…
autogen.sh OpenBSD 5.2 build fixes, Unit test fix. 14 years ago
classification.config Import of classification.config 17 years ago
config.rpath Add file needed for some autotools version. 13 years ago
configure.ac util-ioctl: add GRO/LRO detection capabilities 13 years ago
doxygen.cfg Adding an updated doxygen config file, because the old one was created a couple major versions ago. 14 years ago
reference.config Add md5 to reference.config. 15 years ago
suricata.yaml.in yaml: remove no more present files 13 years ago
threshold.config threshold: improve comments of shipped threshold.config, add links to wiki. 14 years ago