Project

General

Profile

Actions

Feature #1372

closed

Support dedup of files for filestore

Added by Duane Howard over 9 years ago. Updated over 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Effort:
Difficulty:
Label:

Description

It would be helpful if Suricata compared md5s of files captured with filestore with files already written to disk.
Example 5 clients request the same PDF, the file should be written once, and the metadata should be written 5 times (one per request).

Actions

Also available in: Atom PDF