From 5cee70f9ae60e480b4c4d71d45848a1b15dae024 Mon Sep 17 00:00:00 2001 From: Andreas Herz Date: Tue, 17 Nov 2015 12:25:29 +0100 Subject: [PATCH] Fix the comment and explanation for random-chunk-size --- suricata.yaml.in | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/suricata.yaml.in b/suricata.yaml.in index 90f590915c..3a6841947d 100644 --- a/suricata.yaml.in +++ b/suricata.yaml.in @@ -879,9 +879,10 @@ flow-timeouts: # # This lower the risk of some evasion technics but could lead # # detection change between runs. It is set to 'yes' by default. # randomize-chunk-range: 10 # If randomize-chunk-size is active, the value of chunk-size is -# # a random value between (1 - randomize-chunk-range/100)*randomize-chunk-size -# # and (1 + randomize-chunk-range/100)*randomize-chunk-size. Default value -# # of randomize-chunk-range is 10. +# # a random value between (1 - randomize-chunk-range/100)*toserver-chunk-size +# # and (1 + randomize-chunk-range/100)*toserver-chunk-size and the same +# # calculation for toclient-chunk-size. +# # Default value of randomize-chunk-range is 10. # # raw: yes # 'Raw' reassembly enabled or disabled. # # raw is for content inspection by detection -- 2.47.2