Project

General

Profile

Actions

Bug #3889

open

Support interfaces with MTU > 1500

Added by Oded Lazar over 4 years ago. Updated over 1 year ago.

Status:
New
Priority:
Normal
Target version:
Affected Versions:
Effort:
low
Difficulty:
low
Label:
Beginner

Description

Suricata currently doesn't support interfaces with MTU set under 1500.
the default block size is 32768 on most machines (pagesize ^ order --> 4096 ^ 3),
thus suricata splits the payload to 32768 / 1500 -> 22.

If an interface has a bigger MTU, such as localhost which defaults to 65536, the block size is too small.

Actions #1

Updated by Victor Julien over 4 years ago

  • Status changed from New to In Review
  • Assignee set to Oded Lazar
  • Target version set to 6.0.0rc1
Actions #2

Updated by Victor Julien over 4 years ago

  • Affected Versions 6.0.0beta1 added
  • Affected Versions deleted (6.0.0)
Actions #3

Updated by Victor Julien over 4 years ago

  • Target version changed from 6.0.0rc1 to 7.0.0-beta1

Setting later target for now. Waiting for github discussion to settle/reach a conclusion.

Actions #4

Updated by Victor Julien about 2 years ago

  • Status changed from In Review to New
  • Assignee deleted (Oded Lazar)
  • Target version changed from 7.0.0-beta1 to TBD
Actions #5

Updated by Philippe Antoine over 1 year ago

  • Assignee set to Community Ticket
Actions

Also available in: Atom PDF