Project

General

Profile

Actions
Copy link

Bug #3889

open

Support interfaces with MTU > 1500

Added by Oded Lazar almost 5 years ago. Updated about 2 years ago.

Status:
New
Priority:
Normal
Assignee:
Community Ticket
Target version:
TBD
Affected Versions:
6.0.0beta1
Effort:
low
Difficulty:
low
Label:
Beginner

Description

Suricata currently doesn't support interfaces with MTU set under 1500.
the default block size is 32768 on most machines (pagesize ^ order --> 4096 ^ 3),
thus suricata splits the payload to 32768 / 1500 -> 22.

If an interface has a bigger MTU, such as localhost which defaults to 65536, the block size is too small.

Actions
Copy link

Also available in: Atom PDF