Project

General

Profile

Actions
Copy link

Feature #1349

closed

OOBE -7- increasing libhtp's request/responce body limits

Added by Peter Manev over 10 years ago. Updated about 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
OISF Dev
Target version:
-
Effort:
Difficulty:
Label:

Description

This is part of OOBE tickets line.
Out Of the Box Experience(OOBE) is aimed at providing better defaults values in suricata.yaml

request-body-limit: 1MB
request-body-limit: 1MB

Since we already have default stream depth of 1MB, so bumping up
request/responce-body-limit to be in line with that would not hurt.
Actions
Copy link
 #1

Updated by Andreas Herz over 9 years ago

  • Assignee set to OISF Dev
  • Target version set to 70
Actions
Copy link
 #2

Updated by Victor Julien about 9 years ago

  • Status changed from New to Closed
  • Target version deleted (70)

After talking to ET folks, the default are set to:

           # Can be specified in kb, mb, gb.  Just a number indicates
           # it's in bytes.
           request-body-limit: 100kb
           response-body-limit: 100kb

           # inspection limits
           request-body-minimal-inspect-size: 32kb
           request-body-inspect-window: 4kb
           response-body-minimal-inspect-size: 40kb
           response-body-inspect-window: 16kb
Actions
Copy link

Also available in: Atom PDF