ips =
{
--include = '../test.rules',
- include = 'rules/active.rules',
+ --include = 'rules/active.rules',
--rules = local_rules,
- --enable_builtin_rules = true
+ enable_builtin_rules = true
}
class HostsModule : public Module
{
public:
- HostsModule() : Module("hosts", hosts_help, hosts_params, true) { };
+ HostsModule() : Module("hosts", hosts_help, hosts_params, true)
+ { app = nullptr; host = nullptr; };
~HostsModule() { assert(!host && !app); };
bool set(const char*, Value&, SnortConfig*);
when.vlans.set();
when.ports.set();
+ when.id = 0;
when.role = BR_EITHER;
use.action = BA_INSPECT;
}
"gaps",
"internal events",
"client cleanup flushes",
- "server cleanup flushes"
+ "server cleanup flushes",
+ nullptr
};
THREAD_LOCAL TcpStats tcpStats;
// config methods
//-------------------------------------------------------------------------
+
+
StreamTcpConfig::StreamTcpConfig()
{
policy = STREAM_POLICY_DEFAULT;
hs_timeout = -1;
flags = 0;
+ flush_factor = 0;
+ session_on_syn = 0; // FIXIT-L configurable via module?
+ overlap_limit = 0;
+
+ hs_timeout = 0;
+ footprint = 0;
+ paf_max = 16384;
+
max_queued_bytes = S5_DEFAULT_MAX_QUEUED_BYTES;
max_queued_segs = S5_DEFAULT_MAX_QUEUED_SEGS;