webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-27 19:23:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

suricata: Enable midstream scanning

Browse Source 
We require this because Suricata might be restarted due to development
or rule refreshment purposes. We should then try to resume any
decoders/app-layers wherever possible.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2024-04-08 14:57:49 +00:00
parent 76a4518091
commit 763c7f67fa
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
config/suricata/suricata.yaml
View File

@@ -1116,7 +1116,7 @@ stream:
prealloc-sessions: 4096
#memcap-policy: ignore
checksum-validation: yes # reject incorrect csums
#midstream: false
midstream: true
midstream-policy: pass-packet
inline: auto # auto will use inline mode in IPS mode, yes or no set it statically
bypass: yes # Bypass packets when stream.reassembly.depth is reached.