]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
stream: add stream.reassembly.check-overlap-different-data option
authorVictor Julien <victor@inliniac.net>
Thu, 28 Apr 2016 09:48:30 +0000 (11:48 +0200)
committerVictor Julien <victor@inliniac.net>
Thu, 20 Apr 2017 15:41:11 +0000 (17:41 +0200)
suricata.yaml.in

index 4f2dd63220e95d8e29dc9b1664cb0e23085f6d95..1009c94ac9475404b6cff27ef7ef3203ba02ad8a 100644 (file)
@@ -1208,6 +1208,13 @@ flow-timeouts:
 #       - size: 4               # Size of the (data)segment for a pool
 #         prealloc: 256         # Number of segments to prealloc and keep
 #                               # in the pool.
+#     check-overlap-different-data: true|false
+#                               # check if a segment contains different data
+#                               # than what we've already seen for that
+#                               # position in the stream.
+#                               # This is enabled automatically if inline mode
+#                               # is used or when stream-event:reassembly_overlap_different_data;
+#                               # is used in a rule.
 #
 stream:
   memcap: 64mb
@@ -1241,6 +1248,7 @@ stream:
     #    prealloc: 1024
     #  - size: 65535
     #    prealloc: 128
+    #check-overlap-different-data: true
 
 # Host table:
 #