Project

General

Profile

Actions
Copy link

Optimization #7617

closed

af-packet: set defrag based on passive or inline mode

Added by Jason Ish 13 days ago. Updated 4 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

By default, with no cluster-type setting, or with cluster-type flow, af-packet will enable defrag, even in IPS mode.

Instead we should choose better defaults for users:
- If inline, disable defrag
- If passive, enable defrag

Related issues 1 (0 open — 1 closed)

Related to Suricata - Optimization #4798: af-packet: default to tpacket-v3 in IDS modeClosedJason IshActions
Actions
Copy link

Also available in: Atom PDF