Actions
Optimization #5134
openDCERPC: dcerpc.iface keyword not using fast pattern/mpm causes severe performance degradation
Description
Please see attached for full comparison between 5.0.8 / 6.0.4 and master
The pcap used - https://redmine.openinfosecfoundation.org/attachments/2434
Files
Updated by Lukas Sismis about 1 year ago
Requires custom DCERPC Prefilter because the field is not content and supports masking and different operators.
Updated by Philippe Antoine 16 days ago
- Tracker changed from Bug to Optimization
- Affected Versions deleted (
5.0.8, 6.0.4, git main)
Actions