Project

General

Profile

Actions
Copy link

Feature #194

closed

Split stream session and reassembly memcaps

Added by Victor Julien almost 14 years ago. Updated almost 14 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Gurvinder Singh
Target version:
1.0.1
Effort:
Difficulty:
Label:

Description

When processing a lot of traffic (testing with 750GB pcap) the stream engine memcap is reached quickly because of all the TCP segments that are alloc'd. This prevents the engine from tracking new TCP sessions. Splitting the memcaps will enable the engine to keep tracking sessions.

Will be a task.

Actions
Copy link

Also available in: Atom PDF