[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oisf-users
Subject:    Re: [Oisf-users] Body limit inspection
From:       Victor Julien <lists () inliniac ! net>
Date:       2012-12-10 12:58:06
Message-ID: 50C5DC5E.7010107 () inliniac ! net
[Download RAW message or body]

On 12/10/2012 01:12 PM, Peter Manev wrote:
> Hi ,
> 
> If we have in yaml (latest git):
> 
> # inspection limits
>      request-body-minimal-inspect-size: 32kb
>      request-body-inspect-window: 4kb
>      response-body-minimal-inspect-size: 32kb
>      response-body-inspect-window: 4kb
> 
> 
> How is this handled if for example we have
> request-body-minimal-inspect-size: 2Mb
> 
> and that size is never reached and the session is timeout (by means of
> yaml config - 20 sec)... then the body would be inspected on timeout ? or ?

Yes, it will.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------

_______________________________________________
Suricata IDS Users mailing list: oisf-users@openinfosecfoundation.org
Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
OISF: http://www.openinfosecfoundation.org/
[prev in list] [next in list] [prev in thread] [next in thread]