From: Shivani Bhardwaj <shivani@oisf.net>
Date: Thu, 9 May 2024 15:51:25 +0000 (+0530)
Subject: doc: add note about datasets string memcaps
X-Git-Tag: suricata-8.0.0-beta1~1058
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c66f1f4488808850d835d6fa40baf91473cd99c8;p=thirdparty%2Fsuricata.git

doc: add note about datasets string memcaps

Bug 3910
---

diff --git a/doc/userguide/upgrade.rst b/doc/userguide/upgrade.rst
index bafecb804c..69134c331c 100644
--- a/doc/userguide/upgrade.rst
+++ b/doc/userguide/upgrade.rst
@@ -62,6 +62,9 @@ Major changes
   reassembly earlier.
 - New transform ``from_base64`` that base64 decodes a buffer and passes the
   decoded buffer. It's recommended that ``from_base64`` be used instead of ``base64_decode``
+- Datasets of type String now include the length of the strings to determine if the memcap value is reached.
+  This may lead to memcaps being hit for older setups that didn't take that into account.
+  For more details, check https://redmine.openinfosecfoundation.org/issues/3910
 
 Upgrading 6.0 to 7.0
 --------------------