From: Yehor Furman -X (yefurman - SOFTSERVE INC at Cisco) Date: Fri, 9 Jan 2026 15:23:45 +0000 (+0000) Subject: Pull request #5083: appid: enable out-of-order inspection by default X-Git-Tag: 3.10.1.0~2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5fbc9b11b4a6950c91c257eff8941c95b4e352c8;p=thirdparty%2Fsnort3.git Pull request #5083: appid: enable out-of-order inspection by default Merge in SNORT/snort3 from ~YEFURMAN/snort3:appid_ooo_by_default to master Squashed commit of the following: commit bf9e2b73759c5c43191f78445c1e301bd2a0241e Author: yefurman Date: Thu Jan 8 07:43:19 2026 -0500 appid: enable out-of-order inspection by default --- diff --git a/src/network_inspectors/appid/app_info_table.cc b/src/network_inspectors/appid/app_info_table.cc index 4030b94a3..29c4a8aca 100644 --- a/src/network_inspectors/appid/app_info_table.cc +++ b/src/network_inspectors/appid/app_info_table.cc @@ -632,9 +632,9 @@ void AppInfoManager::load_odp_config(OdpContext& odp_ctxt, const char* path) } else if (!(strcasecmp(conf_key, "inspect_ooo_flows"))) { - if (!(strcasecmp(conf_val, "enabled"))) + if (!(strcasecmp(conf_val, "disabled"))) { - odp_ctxt.inspect_ooo_flows = true; + odp_ctxt.inspect_ooo_flows = false; continue; } } diff --git a/src/network_inspectors/appid/appid_config.h b/src/network_inspectors/appid/appid_config.h index f655e7b0f..bb3992100 100644 --- a/src/network_inspectors/appid/appid_config.h +++ b/src/network_inspectors/appid/appid_config.h @@ -149,7 +149,7 @@ public: bool recheck_for_portservice_appid = false; bool eve_http_client = true; bool appid_cpu_profiler = true; - bool inspect_ooo_flows = false; + bool inspect_ooo_flows = true; uint8_t brute_force_inprocess_threshold = DEFAULT_BRUTE_FORCE_INPROCESS_STATE_THRESHOLD; uint16_t max_packet_before_service_fail = DEFAULT_MAX_PKTS_BEFORE_SERVICE_FAIL; uint16_t max_packet_service_fail_ignore_bytes = DEFAULT_MAX_PKT_BEFORE_SERVICE_FAIL_IGNORE_BYTES;