Project

General

Profile

Actions

Feature #194

closed

Split stream session and reassembly memcaps

Added by Victor Julien over 14 years ago. Updated over 14 years ago.

Status:
Closed
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

When processing a lot of traffic (testing with 750GB pcap) the stream engine memcap is reached quickly because of all the TCP segments that are alloc'd. This prevents the engine from tracking new TCP sessions. Splitting the memcaps will enable the engine to keep tracking sessions.

Will be a task.

Actions

Also available in: Atom PDF