If stream.inline setting was missing it would default to IDS.
This patch changes the default to 'auto', meaning that in IPS mode
the stream engine also uses IPS mode and in IDS mode it's still in
IDS mode.
Bug #1570
"enabled" : "disabled");
}
- int inl = 0;
-
-
char *temp_stream_inline_str;
if (ConfGet("stream.inline", &temp_stream_inline_str) == 1) {
+ int inl = 0;
+
/* checking for "auto" and falling back to boolean to provide
* backward compatibility */
if (strcmp(temp_stream_inline_str, "auto") == 0) {
} else if (ConfGetBool("stream.inline", &inl) == 1) {
stream_inline = inl;
}
+ } else {
+ /* default to 'auto' */
+ if (EngineModeIsIPS()) {
+ stream_inline = 1;
+ } else {
+ stream_inline = 0;
+ }
}
if (!quiet) {