Project

General

Custom queries

Profile

Actions
Copy link

Optimization #7617

closed

af-packet: set defrag based on passive or inline mode

Added by Jason Ish 14 days ago. Updated 5 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

By default, with no cluster-type setting, or with cluster-type flow, af-packet will enable defrag, even in IPS mode.

Instead we should choose better defaults for users:
- If inline, disable defrag
- If passive, enable defrag

Related issues 1 (0 open — 1 closed)

Related to Suricata - Optimization #4798: af-packet: default to tpacket-v3 in IDS modeClosedJason IshActions
#1

Updated by Jason Ish 14 days ago

#2

Updated by Jason Ish 8 days ago

  • Status changed from Assigned to In Progress
#3

Updated by Jason Ish 7 days ago

  • Status changed from In Progress to In Review
#4

Updated by Jason Ish 5 days ago

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: Atom PDF