Add a warning in Modbus section of YAML file to remind user to modify stream depth...

diff --git a/suricata.yaml.in b/suricata.yaml.in
index ed34f7619083c3634608cfc391541cc362d06916..c9458e733da61ecde411f166b1eca46cd21debf9 100644 (file)
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@@ -1205,6 +1205,11 @@ app-layer:
       enabled: yes
       detection-ports:
         dp: 502
+      # According to MODBUS Messaging on TCP/IP Implementation Guide V1.0b, it 
+      # is recommended to keep the TCP connection opened with a remote device 
+      # and not to open and close it for each MODBUS/TCP transaction. In that 
+      # case, it is important to set the depth of the stream reassembling as
+      # unlimited (stream.reassembly.depth: 0)
     # smb2 detection is disabled internally inside the engine.
     #smb2:
     #  enabled: yes