Project

General

Profile

Actions

Documentation #6284

closed
JF VJ

userguide: document what's the impact of `stream.inline`

Documentation #6284: userguide: document what's the impact of `stream.inline`

Added by Juliana Fajardini Reichow over 2 years ago. Updated 7 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

The `stream.inline` config parameter isn't very clear in what changing this setting means, to the engine.
This may lead to user confusion, and possibly to outcomes very different from their expectations (cf
https://forum.suricata.io/t/question-about-stream-inline/3868).

We need to better document what the possible values ('auto', 'yes', and 'no') mean in terms of Suricata behavior.

It would be good to also have an SV test to showcase this usage and configuration, and ideally a glossary indicating
terms in Suricata documentation (and codebase) that can be used to refer to IPS mode (as it seems to be the case here).

These could become separate tickets if that'd be easier.

JF Updated by Juliana Fajardini Reichow over 2 years ago Actions #1

  • Description updated (diff)

VJ Updated by Victor Julien over 2 years ago Actions #2

  • Target version changed from 7.0.2 to 7.0.3

VJ Updated by Victor Julien over 2 years ago Actions #3

  • Target version changed from 7.0.3 to 8.0.0-beta1

VJ Updated by Victor Julien about 1 year ago Actions #4

  • Target version changed from 8.0.0-beta1 to 8.0.0-rc1

VJ Updated by Victor Julien 10 months ago Actions #5

  • Target version changed from 8.0.0-rc1 to 8.0.0

VJ Updated by Victor Julien 10 months ago Actions #6

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Victor Julien

VJ Updated by Victor Julien 9 months ago Actions #7

  • Target version changed from 8.0.0 to 8.0.1

VJ Updated by Victor Julien 7 months ago Actions #8

  • Status changed from Assigned to Closed
Actions

Also available in: PDF Atom