Project

General

Profile

Actions

Feature #194

closed
VJ GS

Split stream session and reassembly memcaps

Feature #194: Split stream session and reassembly memcaps

Added by Victor Julien almost 16 years ago. Updated almost 16 years ago.

Status:
Closed
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

When processing a lot of traffic (testing with 750GB pcap) the stream engine memcap is reached quickly because of all the TCP segments that are alloc'd. This prevents the engine from tracking new TCP sessions. Splitting the memcaps will enable the engine to keep tracking sessions.

Will be a task.

Actions

Also available in: PDF Atom