Bug #3889
closed
Support interfaces with MTU > 1500
Added by Oded Lazar almost 5 years ago.
Updated 3 days ago.
Description
Suricata currently doesn't support interfaces with MTU set under 1500.
the default block size is 32768 on most machines (pagesize ^ order --> 4096 ^ 3),
thus suricata splits the payload to 32768 / 1500 -> 22.
If an interface has a bigger MTU, such as localhost which defaults to 65536, the block size is too small.
- Status changed from New to In Review
- Assignee set to Oded Lazar
- Target version set to 6.0.0rc1
- Affected Versions 6.0.0beta1 added
- Affected Versions deleted (
6.0.0)
- Target version changed from 6.0.0rc1 to 7.0.0-beta1
Setting later target for now. Waiting for github discussion to settle/reach a conclusion.
- Status changed from In Review to New
- Assignee deleted (
Oded Lazar)
- Target version changed from 7.0.0-beta1 to TBD
- Assignee set to Community Ticket
- Status changed from New to Closed
Fixed by c342b054f40630521253666d3ca0192250a59ad2 see #7458
Also available in: Atom
PDF