Actions
Feature #194
closedSplit stream session and reassembly memcaps
Effort:
Difficulty:
Label:
Description
When processing a lot of traffic (testing with 750GB pcap) the stream engine memcap is reached quickly because of all the TCP segments that are alloc'd. This prevents the engine from tracking new TCP sessions. Splitting the memcaps will enable the engine to keep tracking sessions.
Will be a task.
Actions