From: DIALLO David <diallo@et.esiea.fr>
Date: Mon, 15 Dec 2014 16:37:04 +0000 (+0100)
Subject: Add a warning in Modbus section of YAML file to remind user to modify stream depth... 
X-Git-Tag: suricata-2.1beta3~96
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bacbe113d0d91251835dab3bb4e0bda01fa04bc5;p=thirdparty%2Fsuricata.git

Add a warning in Modbus section of YAML file to remind user to modify stream depth (unlimited)
---

diff --git a/suricata.yaml.in b/suricata.yaml.in
index ed34f76190..c9458e733d 100644
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@@ -1205,6 +1205,11 @@ app-layer:
       enabled: yes
       detection-ports:
         dp: 502
+      # According to MODBUS Messaging on TCP/IP Implementation Guide V1.0b, it 
+      # is recommended to keep the TCP connection opened with a remote device 
+      # and not to open and close it for each MODBUS/TCP transaction. In that 
+      # case, it is important to set the depth of the stream reassembling as
+      # unlimited (stream.reassembly.depth: 0)
     # smb2 detection is disabled internally inside the engine.
     #smb2:
     #  enabled: yes