From fae2836039ef56daebcc222e41be3b4ad445b27c Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Fri, 11 Dec 2015 16:05:42 +0100 Subject: [PATCH] http: more sane body inspection/tracking defaults --- suricata.yaml.in | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/suricata.yaml.in b/suricata.yaml.in index a2e4dbe6eb..6614906f13 100644 --- a/suricata.yaml.in +++ b/suricata.yaml.in @@ -1441,14 +1441,14 @@ app-layer: # Can be specified in kb, mb, gb. Just a number indicates # it's in bytes. - request-body-limit: 3072 - response-body-limit: 3072 + request-body-limit: 100kb + response-body-limit: 100kb # inspection limits request-body-minimal-inspect-size: 32kb request-body-inspect-window: 4kb - response-body-minimal-inspect-size: 32kb - response-body-inspect-window: 4kb + response-body-minimal-inspect-size: 40kb + response-body-inspect-window: 16kb # auto will use http-body-inline mode in IPS mode, yes or no set it statically http-body-inline: auto -- 2.47.2